0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x10881, 0x18) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r2, 0xc) r4 = fcntl$dupfd(r3, 0x406, r2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0xcb, 0x28, 0x2, 0x0, 0x7, 0x2000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x5, 0x6, 0x5, 0x280, 0x3f, 0x2, 0x0, 0x5, 0x0, 0x5}, 0xffffffffffffffff, 0xa, r2, 0xa) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f0000000680)={0x5, 0x80, 0x7f, 0xde, 0x1, 0x2, 0x0, 0x8001, 0x18000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000640), 0x6}, 0x8480, 0x3fc0000000000, 0x0, 0x5, 0xfffffffffffffff8, 0xa2b, 0xff11, 0x0, 0x40, 0x0, 0x9}, r5, 0x1, 0xffffffffffffffff, 0x8) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r6 = eventfd2(0x3f, 0x80001) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000240)={0x0, 0x9, 0x4, 0x1}) ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYBLOB="00000000308749a1f2007ecb7aa1de117bbc4143289354f4b6ffa552d05acfca173eeae82b3cd58ebb302d776c7c1e0ae10f446f661a61721fac33148415ed62270d287217a24a6a88e3eac52f41fb121468a003a72899a0d0f2ed860f8ad30a71f9d5d054acb0938b0a5032f24e699778f9cdd36524c7f748ac8f73ed6e5f1157ffac13b481128e8616b68e2a", @ANYRESDEC=r7, @ANYBLOB=':00000000000000000001M']) fallocate(r0, 0x3, 0x3, 0x8000008000) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x4, 0x3, 0x71, 0xb8, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000740), 0xd}, 0x40318, 0x7, 0x9, 0x2, 0xfff, 0x80000000, 0xdec, 0x0, 0x5, 0x0, 0x1}, 0x0, 0x10, r2, 0x1) 13:52:56 executing program 7: set_mempolicy(0x0, &(0x7f0000000180)=0x15, 0x7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x20100, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3ff) r1 = syz_io_uring_setup(0x55db, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x10010, 0xffffffffffffffff, 0x10000000) pipe(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0xc0045878, 0x0) syz_io_uring_submit(r2, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, {0x2}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x1c6, 0xffcd, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/209, 0xd1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3) [ 2452.024986] FAULT_INJECTION: forcing a failure. [ 2452.024986] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.026016] CPU: 1 PID: 18694 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2452.026681] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.027431] Call Trace: [ 2452.027665] dump_stack+0x107/0x167 [ 2452.027971] should_fail.cold+0x5/0xa [ 2452.028282] ? create_object.isra.0+0x3a/0xa20 [ 2452.028653] should_failslab+0x5/0x20 [ 2452.028974] kmem_cache_alloc+0x5b/0x310 [ 2452.029310] create_object.isra.0+0x3a/0xa20 [ 2452.029660] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2452.030080] kmem_cache_alloc+0x159/0x310 [ 2452.030428] vm_area_alloc+0x1c/0x110 [ 2452.030737] alloc_bprm+0x337/0x8f0 [ 2452.031036] do_execveat_common+0x275/0x8d0 [ 2452.031386] ? strncpy_from_user+0x9e/0x470 [ 2452.031744] ? bprm_execve+0x1a60/0x1a60 [ 2452.032085] __x64_sys_execveat+0xed/0x140 [ 2452.032430] do_syscall_64+0x33/0x40 [ 2452.032733] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2452.033144] RIP: 0033:0x7fac73041b19 [ 2452.033458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.034905] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2452.035518] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2452.036104] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2452.036681] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.037254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.037824] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:52:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 13:52:56 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:52:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 11) 13:52:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 2452.161399] FAULT_INJECTION: forcing a failure. [ 2452.161399] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2452.162893] CPU: 0 PID: 18711 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2452.163686] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2452.164608] Call Trace: [ 2452.164915] dump_stack+0x107/0x167 [ 2452.165335] should_fail.cold+0x5/0xa [ 2452.165775] __alloc_pages_nodemask+0x182/0x600 [ 2452.166296] ? __lockdep_reset_lock+0x180/0x180 [ 2452.166824] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2452.167494] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2452.168078] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2452.168673] alloc_pages_current+0x187/0x280 [ 2452.169174] get_zeroed_page+0x14/0xb0 [ 2452.169613] __pud_alloc+0x33/0x270 [ 2452.170029] handle_mm_fault+0x1a73/0x3500 [ 2452.170511] ? perf_trace_lock+0x2bd/0x490 [ 2452.170995] ? SOFTIRQ_verbose+0x10/0x10 [ 2452.171455] ? __pmd_alloc+0x5e0/0x5e0 [ 2452.171989] __get_user_pages+0x61b/0x1380 [ 2452.172483] ? follow_page_mask+0x1900/0x1900 [ 2452.172990] ? __lockdep_reset_lock+0x180/0x180 [ 2452.173514] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2452.174065] __get_user_pages_remote+0x1d5/0x870 [ 2452.174602] ? lock_downgrade+0x6d0/0x6d0 [ 2452.175082] get_user_pages_remote+0x63/0x90 [ 2452.175586] get_arg_page+0xba/0x200 [ 2452.176024] ? acct_arg_size+0xe0/0xe0 [ 2452.176459] ? downgrade_write+0x3a0/0x3a0 [ 2452.176936] ? count.constprop.0+0x1b3/0x290 [ 2452.177440] copy_string_kernel+0x1b4/0x450 [ 2452.177940] do_execveat_common+0x525/0x8d0 [ 2452.178432] ? bprm_execve+0x1a60/0x1a60 [ 2452.178917] __x64_sys_execveat+0xed/0x140 [ 2452.179406] do_syscall_64+0x33/0x40 [ 2452.179851] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2452.180425] RIP: 0033:0x7fac73041b19 [ 2452.180848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.182885] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2452.183749] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2452.184544] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2452.185337] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.186137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2452.186930] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2452.686336] audit: type=1326 audit(1708005177.291:533): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18673 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580c5fbb19 code=0x0 [ 2452.690294] audit: type=1326 audit(1708005177.292:534): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18673 comm="syz-executor.4" exe="/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580c5fbb19 code=0x0 13:53:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 13:53:11 executing program 6: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'xfrm0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x6, [{0x4, 0x5}, {0xffffffff, 0x1}, {0x3a}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x5}]}}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0xd3, 0x20, 0x20, 0x0, 0x100000000, 0x20242, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x800}, 0x10, 0x60000000000, 0x21b9, 0x7, 0xc1, 0x2, 0x1, 0x0, 0x1ff, 0x0, 0x2}, r4, 0xe, r3, 0x3) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 13:53:11 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:11 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:53:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 12) 13:53:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0x3, 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, &(0x7f0000000180)=""/163, 0xa3) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xc8) io_setup(0x3e3, &(0x7f0000000580)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r2, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000680)=0x4) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000100)=""/186, 0xba}], 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x5) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000080)={0x4004800, 0x500, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) 13:53:11 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0xfffffffc, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r4}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r3, 0x0, &(0x7f0000000380)="64580331400177aba8da478331cc9c1b7a4a73d6e82188f5b2355c1c279cbe050e6d9a30efb4c428faef956a7d4ebadca7394a46bde6bd235c4b361ae99bf1638e015147cc3ddce1c332f0054b", 0x4d, 0x10000, 0x0, {0x0, r4}}, 0x7) readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r5, 0x6801, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x837013, 0x0) unshare(0x48020200) [ 2466.860929] FAULT_INJECTION: forcing a failure. [ 2466.860929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2466.862298] CPU: 1 PID: 18731 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2466.862966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2466.863794] Call Trace: [ 2466.864073] dump_stack+0x107/0x167 [ 2466.864452] should_fail.cold+0x5/0xa [ 2466.864895] __alloc_pages_nodemask+0x182/0x600 [ 2466.865423] ? lock_acquire+0x197/0x470 [ 2466.865874] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2466.866562] ? lock_downgrade+0x6d0/0x6d0 [ 2466.867035] ? do_raw_spin_lock+0x121/0x260 [ 2466.867531] alloc_pages_current+0x187/0x280 [ 2466.868045] __pmd_alloc+0x37/0x5e0 [ 2466.868465] handle_mm_fault+0x1ac4/0x3500 [ 2466.868946] ? perf_trace_lock+0xac/0x490 [ 2466.869412] ? SOFTIRQ_verbose+0x10/0x10 [ 2466.869876] ? __pmd_alloc+0x5e0/0x5e0 [ 2466.870341] __get_user_pages+0x61b/0x1380 [ 2466.870835] ? follow_page_mask+0x1900/0x1900 [ 2466.871342] ? __lockdep_reset_lock+0x180/0x180 [ 2466.871876] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2466.872417] __get_user_pages_remote+0x1d5/0x870 [ 2466.872953] ? lock_downgrade+0x6d0/0x6d0 [ 2466.872977] get_user_pages_remote+0x63/0x90 [ 2466.873941] get_arg_page+0xba/0x200 [ 2466.874369] ? acct_arg_size+0xe0/0xe0 [ 2466.874809] ? downgrade_write+0x3a0/0x3a0 [ 2466.875295] ? count.constprop.0+0x1b3/0x290 [ 2466.875801] copy_string_kernel+0x1b4/0x450 [ 2466.876310] do_execveat_common+0x525/0x8d0 [ 2466.876808] ? bprm_execve+0x1a60/0x1a60 [ 2466.877284] __x64_sys_execveat+0xed/0x140 [ 2466.877838] do_syscall_64+0x33/0x40 [ 2466.878268] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2466.878846] RIP: 0033:0x7fac73041b19 [ 2466.879274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.881342] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2466.881360] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2466.881368] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2466.881377] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.881385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.881394] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:53:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:53:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:53:11 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d973", 0x2) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:11 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) syz_io_uring_setup(0x13e3, &(0x7f00000000c0)={0x0, 0x5e84, 0x10, 0x3, 0x122, 0x0, r1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:53:11 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9739d", 0x3) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:11 executing program 7: perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r3, 0xc) fcntl$dupfd(r4, 0x406, r3) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000240)=""/231, 0xe7}], 0x1) add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x0, 0x0}) unshare(0x48020200) 13:53:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 13) 13:53:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2467.060580] FAULT_INJECTION: forcing a failure. [ 2467.060580] name failslab, interval 1, probability 0, space 0, times 0 [ 2467.062038] CPU: 1 PID: 18753 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2467.062830] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2467.063743] Call Trace: [ 2467.064046] dump_stack+0x107/0x167 [ 2467.064419] should_fail.cold+0x5/0xa [ 2467.064798] ? __pmd_alloc+0x94/0x5e0 [ 2467.065196] should_failslab+0x5/0x20 [ 2467.065576] kmem_cache_alloc+0x5b/0x310 [ 2467.065988] __pmd_alloc+0x94/0x5e0 [ 2467.066363] handle_mm_fault+0x1ac4/0x3500 [ 2467.066891] ? perf_trace_lock+0xac/0x490 [ 2467.067304] ? SOFTIRQ_verbose+0x10/0x10 [ 2467.067814] ? __pmd_alloc+0x5e0/0x5e0 [ 2467.068239] __get_user_pages+0x61b/0x1380 [ 2467.068683] ? follow_page_mask+0x1900/0x1900 [ 2467.069137] ? __lockdep_reset_lock+0x180/0x180 [ 2467.069598] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2467.070192] __get_user_pages_remote+0x1d5/0x870 [ 2467.070663] ? lock_downgrade+0x6d0/0x6d0 [ 2467.071084] get_user_pages_remote+0x63/0x90 [ 2467.071531] get_arg_page+0xba/0x200 [ 2467.071914] ? acct_arg_size+0xe0/0xe0 [ 2467.072308] ? downgrade_write+0x3a0/0x3a0 [ 2467.072729] ? count.constprop.0+0x1b3/0x290 [ 2467.073182] copy_string_kernel+0x1b4/0x450 [ 2467.073628] do_execveat_common+0x525/0x8d0 [ 2467.074138] ? bprm_execve+0x1a60/0x1a60 [ 2467.074564] __x64_sys_execveat+0xed/0x140 [ 2467.075000] do_syscall_64+0x33/0x40 [ 2467.075381] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2467.075894] RIP: 0033:0x7fac73041b19 [ 2467.076279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.078079] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2467.079035] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2467.079782] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2467.080486] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.081188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2467.081902] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:53:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:53:11 executing program 4: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @remote, 'veth1\x00'}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x386b1}, 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r3, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) fork() 13:53:26 executing program 7: perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x10008, 0x0, 0x0, 0x0, 0xc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) capset(0x0, 0x0) r0 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = gettid() kcmp(0x0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r0, r1, 0x18) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1, 0x80, 0x8, 0x6, 0x0, 0xd55e06c, 0x200, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x200}, 0x0, 0x40, 0x8001, 0x6, 0xfffffffffffffffa, 0x2, 0x8001, 0x0, 0x9, 0x0, 0xfffffffffffff000}, r0, 0xffffffffffffffff, r2, 0x8) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {r4, r5+10000000}}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r6, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) openat$cgroup_ro(r6, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x0, 0x0) 13:53:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:26 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x8000) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048f01000000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x8) r5 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x400100) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r7, 0xc) fcntl$dupfd(r8, 0x406, r7) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r9, 0xc) fcntl$dupfd(r10, 0x406, r9) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="000000696c02287373c2f27a2aed7e6e"]) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r2, 0xffffffffffffffff, r5, r6, r2, r8, r10, r11], 0x8) 13:53:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x0, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:53:26 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x4ca02, 0x29) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x1010, r1, 0x10000000) r6 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r6, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0xfffffffc, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r8}}, 0x1) syz_io_uring_submit(r2, r5, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd=r6, 0xff5e, &(0x7f00000010c0)=[{&(0x7f00000000c0)="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", 0x1000}], 0x1, 0x1a, 0x1, {0x1, r8}}, 0x0) 13:53:26 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 14) 13:53:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 2482.189307] FAULT_INJECTION: forcing a failure. [ 2482.189307] name failslab, interval 1, probability 0, space 0, times 0 [ 2482.191154] CPU: 1 PID: 18779 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2482.192288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2482.193664] Call Trace: [ 2482.194110] dump_stack+0x107/0x167 [ 2482.194712] should_fail.cold+0x5/0xa [ 2482.195337] ? create_object.isra.0+0x3a/0xa20 [ 2482.196091] should_failslab+0x5/0x20 [ 2482.196715] kmem_cache_alloc+0x5b/0x310 [ 2482.197389] create_object.isra.0+0x3a/0xa20 [ 2482.198087] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2482.198910] kmem_cache_alloc+0x159/0x310 [ 2482.199578] __pmd_alloc+0x94/0x5e0 [ 2482.200204] handle_mm_fault+0x1ac4/0x3500 [ 2482.200890] ? perf_trace_lock+0xac/0x490 [ 2482.201687] ? SOFTIRQ_verbose+0x10/0x10 [ 2482.202348] ? __pmd_alloc+0x5e0/0x5e0 [ 2482.203162] __get_user_pages+0x61b/0x1380 [ 2482.203916] ? follow_page_mask+0x1900/0x1900 [ 2482.204814] ? __lockdep_reset_lock+0x180/0x180 [ 2482.205562] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2482.206325] __get_user_pages_remote+0x1d5/0x870 [ 2482.207077] ? lock_downgrade+0x6d0/0x6d0 [ 2482.207751] get_user_pages_remote+0x63/0x90 [ 2482.208480] get_arg_page+0xba/0x200 [ 2482.209082] ? acct_arg_size+0xe0/0xe0 [ 2482.209708] ? downgrade_write+0x3a0/0x3a0 [ 2482.210383] ? count.constprop.0+0x1b3/0x290 [ 2482.211098] copy_string_kernel+0x1b4/0x450 [ 2482.211803] do_execveat_common+0x525/0x8d0 [ 2482.212514] ? bprm_execve+0x1a60/0x1a60 [ 2482.213185] __x64_sys_execveat+0xed/0x140 [ 2482.213870] do_syscall_64+0x33/0x40 [ 2482.214467] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2482.215274] RIP: 0033:0x7fac73041b19 [ 2482.215876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2482.218741] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2482.219943] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2482.221068] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2482.222191] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2482.223303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2482.224440] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:53:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:53:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, 0x0, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:53:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:27 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) [ 2482.455762] perf: interrupt took too long (19430 > 19393), lowering kernel.perf_event_max_sample_rate to 10000 [ 2482.518262] perf: interrupt took too long (25218 > 24287), lowering kernel.perf_event_max_sample_rate to 7000 [ 2482.526558] perf: interrupt took too long (32222 > 31522), lowering kernel.perf_event_max_sample_rate to 6000 13:53:41 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:53:41 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008002) 13:53:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 15) 13:53:41 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r0, 0xc) fcntl$dupfd(r1, 0x406, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r3, 0xc) fcntl$dupfd(r4, 0x406, r3) pidfd_getfd(r2, r4, 0x0) fallocate(r2, 0x3, 0x4077, 0x8000) 13:53:41 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:41 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2496.653644] FAULT_INJECTION: forcing a failure. [ 2496.653644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2496.655386] CPU: 1 PID: 18819 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2496.656348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.657483] Call Trace: [ 2496.657859] dump_stack+0x107/0x167 [ 2496.658381] should_fail.cold+0x5/0xa [ 2496.658927] __alloc_pages_nodemask+0x182/0x600 [ 2496.659580] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2496.660395] ? find_held_lock+0x2c/0x110 [ 2496.660874] ? __pmd_alloc+0x2db/0x5e0 [ 2496.661329] ? lock_downgrade+0x6d0/0x6d0 [ 2496.661809] ? do_raw_spin_lock+0x121/0x260 [ 2496.662313] alloc_pages_current+0x187/0x280 [ 2496.662822] pte_alloc_one+0x16/0x1a0 [ 2496.663264] __pte_alloc+0x1d/0x330 [ 2496.663690] handle_mm_fault+0x287f/0x3500 [ 2496.664194] ? perf_trace_lock+0xac/0x490 [ 2496.664654] ? SOFTIRQ_verbose+0x10/0x10 [ 2496.665128] ? __pmd_alloc+0x5e0/0x5e0 [ 2496.665602] __get_user_pages+0x61b/0x1380 [ 2496.666103] ? follow_page_mask+0x1900/0x1900 [ 2496.666628] ? __lockdep_reset_lock+0x180/0x180 [ 2496.667164] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2496.667712] __get_user_pages_remote+0x1d5/0x870 [ 2496.668276] ? lock_downgrade+0x6d0/0x6d0 [ 2496.668741] get_user_pages_remote+0x63/0x90 [ 2496.669257] get_arg_page+0xba/0x200 [ 2496.669695] ? acct_arg_size+0xe0/0xe0 [ 2496.670141] ? downgrade_write+0x3a0/0x3a0 [ 2496.670627] ? count.constprop.0+0x1b3/0x290 [ 2496.671140] copy_string_kernel+0x1b4/0x450 [ 2496.671651] do_execveat_common+0x525/0x8d0 [ 2496.672151] ? bprm_execve+0x1a60/0x1a60 [ 2496.672622] __x64_sys_execveat+0xed/0x140 [ 2496.673121] do_syscall_64+0x33/0x40 [ 2496.673532] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2496.674121] RIP: 0033:0x7fac73041b19 [ 2496.674555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.676651] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2496.677523] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2496.678341] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2496.679159] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2496.679975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2496.680791] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:53:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:53:41 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:53:41 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000140)={{r0}, "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"}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x8, 0x8, 0x6, 0x1f, 0x0, 0x8, 0x20120, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x1, 0x9, 0x5, 0x5, 0x8001, 0x7fff, 0x3ff, 0x0, 0x9, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:53:41 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 16) 13:53:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:53:41 executing program 7: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="636865636b3d72656c617865642c006806254d0bde681ebbf3ff56129fdb06e6b19703132212aa69a5bca959ef423ae1bbf690cfa268887e53146ee57a8982f2c14f3b7fdfc9526b639c0cd41f5b3e85aa9e21233330a03e2c4324bb6bc1419fd7943d1f175a3c48cc72a9710949a63abe617256"]) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r1, 0x5, 0x8, 0x3}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) setfsgid(r2) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', r0, r2, 0x100) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x81, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="408a3c6750f195deea42afa0a37141d8e234ea4d927f86ea6124b732d3802e4cd761382eab38382420f468a189c82b849bda433224ca61c9d6b13be6f6fadcd039c34b4dd6a931199b5e18ab19394c4542c49e8559e46a55", 0x58}], 0x2080000, &(0x7f00000001c0)={[{',%^'}], [{@fowner_lt}, {@appraise}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@smackfsfloor={'smackfsfloor', 0x3d, '--:!+\'+'}}, {@context={'context', 0x3d, 'system_u'}}, {@euid_lt={'euid<', r0}}]}) [ 2496.916712] FAULT_INJECTION: forcing a failure. [ 2496.916712] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.918148] CPU: 1 PID: 18845 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2496.918973] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.919957] Call Trace: [ 2496.920292] dump_stack+0x107/0x167 [ 2496.920738] should_fail.cold+0x5/0xa [ 2496.921204] ? ptlock_alloc+0x1d/0x70 [ 2496.921666] should_failslab+0x5/0x20 [ 2496.922126] kmem_cache_alloc+0x5b/0x310 [ 2496.922624] ptlock_alloc+0x1d/0x70 [ 2496.923069] pte_alloc_one+0x68/0x1a0 [ 2496.923536] __pte_alloc+0x1d/0x330 [ 2496.923978] handle_mm_fault+0x287f/0x3500 [ 2496.924503] ? perf_trace_lock+0xac/0x490 [ 2496.924978] ? SOFTIRQ_verbose+0x10/0x10 [ 2496.925466] ? __pmd_alloc+0x5e0/0x5e0 [ 2496.925939] __get_user_pages+0x61b/0x1380 [ 2496.926464] ? follow_page_mask+0x1900/0x1900 [ 2496.926979] ? __lockdep_reset_lock+0x180/0x180 [ 2496.927534] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2496.928110] __get_user_pages_remote+0x1d5/0x870 [ 2496.928663] ? lock_downgrade+0x6d0/0x6d0 [ 2496.929169] get_user_pages_remote+0x63/0x90 [ 2496.929678] get_arg_page+0xba/0x200 [ 2496.930134] ? acct_arg_size+0xe0/0xe0 [ 2496.930579] ? downgrade_write+0x3a0/0x3a0 [ 2496.931090] ? count.constprop.0+0x1b3/0x290 [ 2496.931611] copy_string_kernel+0x1b4/0x450 [ 2496.932142] do_execveat_common+0x525/0x8d0 [ 2496.932652] ? bprm_execve+0x1a60/0x1a60 [ 2496.933160] __x64_sys_execveat+0xed/0x140 [ 2496.933676] do_syscall_64+0x33/0x40 [ 2496.934129] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2496.934750] RIP: 0033:0x7fac73041b19 [ 2496.935201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.937389] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2496.938298] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2496.939154] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2496.940207] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2496.941048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2496.941898] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:53:41 executing program 4: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) readv(r1, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) fcntl$setflags(r2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000002c0), 0x480, &(0x7f0000000500)=ANY=[@ANYBLOB='t', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRES32=r2]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) clock_gettime(0x0, &(0x7f0000009900)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000096c0)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000380)=""/216, 0xd8}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000000480)=""/9, 0x9}, {&(0x7f0000000540)=""/70, 0x46}, {&(0x7f00000005c0)=""/146, 0x92}], 0x5, &(0x7f00000004c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=""/227, 0xe3}, {&(0x7f0000000800)=""/20, 0x14}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x3, &(0x7f0000000880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f0000000940)=@abs, 0x6e, &(0x7f0000000d40)=[{&(0x7f00000009c0)=""/23, 0x17}, {&(0x7f0000000a00)=""/188, 0xbc}, {&(0x7f0000000ac0)=""/107, 0x6b}, {&(0x7f0000000b40)=""/18, 0x12}, {&(0x7f0000000b80)=""/9, 0x9}, {&(0x7f0000000bc0)=""/186, 0xba}, {&(0x7f0000000c80)=""/90, 0x5a}, {&(0x7f0000000d00)}], 0x8, &(0x7f0000000dc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000e00), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/12, 0xc}, {&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/170, 0xaa}], 0x3, &(0x7f0000000fc0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001040), 0x6e, &(0x7f00000055c0)=[{&(0x7f00000010c0)=""/192, 0xc0}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000001180)=""/239, 0xef}, {&(0x7f0000001280)=""/90, 0x5a}, {&(0x7f0000005340)=""/223, 0xdf}, {&(0x7f0000005440)=""/113, 0x71}, {&(0x7f00000054c0)=""/236, 0xec}], 0x7, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000005640)=@abs, 0x6e, &(0x7f0000005c40)=[{&(0x7f00000056c0)=""/210, 0xd2}, {&(0x7f00000057c0)=""/231, 0xe7}, {&(0x7f00000058c0)=""/156, 0x9c}, {&(0x7f0000005980)=""/222, 0xde}, {&(0x7f0000005a80)=""/224, 0xe0}, {&(0x7f0000005b80)=""/102, 0x66}, {&(0x7f0000005c00)=""/6, 0x6}], 0x7, &(0x7f0000005cc0)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000005d40)=@abs, 0x6e, &(0x7f0000008000)=[{&(0x7f0000005dc0)=""/4096, 0x1000}, {&(0x7f0000006dc0)=""/224, 0xe0}, {&(0x7f0000006ec0)=""/119, 0x77}, {&(0x7f0000006f40)=""/139, 0x8b}, {&(0x7f0000007000)=""/4096, 0x1000}], 0x5, &(0x7f0000008080)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000080c0)=@abs, 0x6e, &(0x7f0000009240)=[{&(0x7f0000008140)=""/4096, 0x1000}, {&(0x7f0000009140)=""/38, 0x26}, {&(0x7f0000009180)=""/179, 0xb3}], 0x3, &(0x7f0000009280)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000092c0), 0x6e, &(0x7f0000009540)=[{&(0x7f0000009340)=""/246, 0xf6}, {&(0x7f0000009440)=""/208, 0xd0}], 0x2, &(0x7f0000009580)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x110}}], 0x9, 0x1, &(0x7f0000009940)={r4, r5+10000000}) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x4, 0x20, 0x8, 0x0, 0x7fffffff, 0xcc150ff3bf47ad08, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000000040)}, 0x11, 0x21f6, 0x0, 0xf, 0x7079, 0x3edb, 0x3, 0x0, 0x80000000, 0x0, 0x2}, r3, 0xd, r6, 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1f) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./mnt\x00', 0x9001) getpid() unshare(0x40000000) [ 2496.976491] FAT-fs (loop7): bogus number of reserved sectors [ 2496.977659] FAT-fs (loop7): Can't find a valid FAT filesystem 13:53:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 13:53:41 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2497.025443] FAT-fs (loop7): bogus number of reserved sectors [ 2497.026484] FAT-fs (loop7): Can't find a valid FAT filesystem 13:53:41 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x0, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:53:41 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 13:53:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000003c00010000000000000000000ab98154231cd31700000000042887515365665124576362c042d298e85a75b95704c555680000000000"], 0x20}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @short}, 0x14) fcntl$dupfd(r0, 0x0, r1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3bbc8b66, 0xfffffffffffffffc}, 0x6, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8914, &(0x7f0000000140)={'lo\x00'}) 13:53:55 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x4a, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@generic="65eed358f4"]}, 0x1c}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 13:53:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 13:53:55 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:53:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 17) 13:53:55 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:53:55 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d973", 0x2) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2511.234408] FAULT_INJECTION: forcing a failure. [ 2511.234408] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.236435] CPU: 0 PID: 18875 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2511.237564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.238915] Call Trace: [ 2511.239385] dump_stack+0x107/0x167 [ 2511.240003] should_fail.cold+0x5/0xa [ 2511.240657] ? create_object.isra.0+0x3a/0xa20 [ 2511.241414] should_failslab+0x5/0x20 [ 2511.242040] kmem_cache_alloc+0x5b/0x310 [ 2511.242708] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2511.243702] create_object.isra.0+0x3a/0xa20 [ 2511.244441] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2511.245278] kmem_cache_alloc+0x159/0x310 [ 2511.245970] ptlock_alloc+0x1d/0x70 [ 2511.246572] pte_alloc_one+0x68/0x1a0 [ 2511.247196] __pte_alloc+0x1d/0x330 [ 2511.247801] handle_mm_fault+0x287f/0x3500 [ 2511.248506] ? perf_trace_lock+0x2bd/0x490 [ 2511.249197] ? SOFTIRQ_verbose+0x10/0x10 [ 2511.249859] ? __pmd_alloc+0x5e0/0x5e0 [ 2511.250547] __get_user_pages+0x61b/0x1380 [ 2511.251260] ? follow_page_mask+0x1900/0x1900 [ 2511.251975] ? __lockdep_reset_lock+0x180/0x180 [ 2511.252737] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2511.253531] __get_user_pages_remote+0x1d5/0x870 [ 2511.254304] ? lock_downgrade+0x6d0/0x6d0 [ 2511.254997] get_user_pages_remote+0x63/0x90 [ 2511.255727] get_arg_page+0xba/0x200 [ 2511.256339] ? acct_arg_size+0xe0/0xe0 [ 2511.256982] ? downgrade_write+0x3a0/0x3a0 [ 2511.257715] ? count.constprop.0+0x1b3/0x290 [ 2511.258501] copy_string_kernel+0x1b4/0x450 [ 2511.259244] do_execveat_common+0x525/0x8d0 [ 2511.259939] ? bprm_execve+0x1a60/0x1a60 [ 2511.260649] __x64_sys_execveat+0xed/0x140 [ 2511.261356] do_syscall_64+0x33/0x40 [ 2511.261965] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2511.262813] RIP: 0033:0x7fac73041b19 [ 2511.263423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.263556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=18886 comm=syz-executor.4 [ 2511.266370] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2511.266394] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2511.266407] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2511.266431] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.273215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2511.274374] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2511.307676] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 13:53:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:53:56 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:56 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:53:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 13:53:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:53:56 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x120}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r1, 0x101) fallocate(r0, 0x3, 0x3, 0x8000008000) [ 2511.578304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=18886 comm=syz-executor.4 13:54:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 13:54:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 18) 13:54:11 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x4a, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@generic="65eed358f4"]}, 0x1c}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 13:54:11 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:11 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:11 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_pts(r0, 0x220483) [ 2527.210945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2527.220493] FAULT_INJECTION: forcing a failure. [ 2527.220493] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.221702] CPU: 1 PID: 18923 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2527.222388] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.222748] FAULT_INJECTION: forcing a failure. [ 2527.222748] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.223210] Call Trace: [ 2527.223233] dump_stack+0x107/0x167 [ 2527.223253] should_fail.cold+0x5/0xa [ 2527.223278] ? __anon_vma_prepare+0x62/0x500 [ 2527.226131] should_failslab+0x5/0x20 [ 2527.226510] kmem_cache_alloc+0x5b/0x310 [ 2527.226925] __anon_vma_prepare+0x62/0x500 [ 2527.227348] ? __pte_alloc+0x194/0x330 [ 2527.227740] handle_mm_fault+0x2b2d/0x3500 [ 2527.228171] ? perf_trace_lock+0xac/0x490 [ 2527.228601] ? SOFTIRQ_verbose+0x10/0x10 [ 2527.229015] ? __pmd_alloc+0x5e0/0x5e0 [ 2527.229427] __get_user_pages+0x61b/0x1380 [ 2527.229856] ? follow_page_mask+0x1900/0x1900 [ 2527.230308] ? __lockdep_reset_lock+0x180/0x180 [ 2527.230775] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2527.231257] __get_user_pages_remote+0x1d5/0x870 [ 2527.231736] ? lock_downgrade+0x6d0/0x6d0 [ 2527.232164] get_user_pages_remote+0x63/0x90 [ 2527.232630] get_arg_page+0xba/0x200 [ 2527.233013] ? acct_arg_size+0xe0/0xe0 [ 2527.233403] ? downgrade_write+0x3a0/0x3a0 [ 2527.233818] ? count.constprop.0+0x1b3/0x290 [ 2527.234266] copy_string_kernel+0x1b4/0x450 [ 2527.234695] do_execveat_common+0x525/0x8d0 [ 2527.235134] ? bprm_execve+0x1a60/0x1a60 [ 2527.235542] __x64_sys_execveat+0xed/0x140 [ 2527.235974] do_syscall_64+0x33/0x40 [ 2527.236344] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2527.236863] RIP: 0033:0x7fac73041b19 [ 2527.237238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.239010] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2527.239759] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2527.240465] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2527.241184] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.241889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.242585] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2527.243314] CPU: 0 PID: 18930 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2527.244239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.245527] Call Trace: [ 2527.245887] dump_stack+0x107/0x167 [ 2527.246380] should_fail.cold+0x5/0xa [ 2527.246889] ? getname_flags.part.0+0x50/0x4f0 [ 2527.247507] should_failslab+0x5/0x20 [ 2527.248007] kmem_cache_alloc+0x5b/0x310 [ 2527.248560] getname_flags.part.0+0x50/0x4f0 [ 2527.249152] getname_flags+0x9a/0xe0 [ 2527.249658] __x64_sys_execveat+0xd6/0x140 [ 2527.250244] do_syscall_64+0x33/0x40 [ 2527.250744] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2527.251428] RIP: 0033:0x7fde11765b19 [ 2527.251927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.254315] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2527.255307] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2527.256237] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2527.257177] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.258108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2527.258994] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2527.273257] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. writev(r2, &(0x7f00000016c0)=[{&(0x7f0000000280)="29a4abb18c434dc9bde4641326cb02e916671f729dad13b30d24a305e71fa27b0cf9305d1edb9ed5bb10483077c9c4ab69e6d615023bc75364164526231266614071fb1b9e622b1e8a2b016f8803aeac4e1c45f2abeb29677021b985ad23817d9f2e7e15294849d3069d6ed97595d096ceefa76446aefbf4369d016a080bbe9532d09049d996af5dcbdcbbea2361c2e83f70a81bca696c6368d8571dacc8eed0caba33ea747de567c787c10dbd60a85ff27506df743ab704d6a164b2b7a33a0f2a69813bb3cf6397e884b389c25650387e2af6c1154964eb90903ea686d8ca263b14f4ee", 0xe4}, {&(0x7f0000000380)="be802afcf9f137999c31f99d36df9cef8846e77ba86a2605efe7693d6ef2714ed8ed34b46bfc30f896834cef45008eb2a0804ffa04cb5449efb4db95b67f5627bccd66d8bf70270a2aea7ce36fe9433fb4f729795ff0815718ab206eaf43c46b6e40c29f39f338a7c9b53b331bab8c5ea61e9531b226231c01116413c9a9abfa83bb0ee5112b6667bc825773a8cd61d9463b5abe9adf0ff468a52c9755151818ec750472feb990f1840b079fb2504f0b241135a6501a514be615b08fc7206cd170a7eb4e8b9afbe2f9ac0ce9763c", 0xce}, {&(0x7f0000000480)="1e42009f8335adac179c9716e0bc569b022e8fa915ae5cf9f30640ff23af6db9cd5cf1358d3be800d9016a6cdf8c4104a1e9d37a078359e2db2114fbf063ca6a44bb45264f2a", 0x46}, {&(0x7f0000000500)="fddc752e7e331dbe1fdbe762acf00678ddbb02ba8a1ede53839699a41c0c294d8486df495d1716bc3bbe97a699a791f90a3449849acda729965757937a42e5fc68b8aab71a70662ce22c0573d5923bb69d785023a15447ba4a5e13c5041cd06e60edc05ff8551c8a83a9587e280c336931d6b176bc5e07a85e13cd30cee173b6b2b492846c379557", 0x88}, {&(0x7f00000005c0)="63a4ba5e4e7c419a90dd6c7c02bb2a951020f131f507233d157c6e955013a42e53c9fd9a025aa33ab34ad441916071fbaf1b7882272a2112be8607aee38c1b753553cb7c9cbf01ddc5dcb08c39049997b4d3448fca84501995d20c3895884715964f232771821c34d54cf0aaddf8077f42f553249d0e0c8978d5cb91f105c80286f8895f2d8edd50afe6830abe23d2938a9dbb1b6ffa196fd11e220762070d58f0f5558b5344459c29ad48a8a6fae2456f70c0e3a5eef8d8ea53594dd2258f488e2d1774de999f9746a6a2b64ea78b962b79c57aa5f30c6ac2727a427b6eb65b44be9ba01d5da6ee4e1199d66b858874acc717c10efee855079e792c6e801e84f53af9ccf09a229dd6c3202fbfd0e37cb7bbbd667ebc2c855efb4bad3fa1f41eceb7eaa66d2922cec974228d2b82c5ca516fcb0ffe16234de5adcd8f5077719d6216d8fbda9bd2ef7398cd4309a226fb8529bb71a8341416f6ddc92691ac025327a65750966937a069a1f71e6e3cd96166e23539d800493da1a7bc97962b84a17b25efff30868548bd201ce9d3f2a54c3734a4a0fcc4a5be0d068285394ecce742e796af22aff93c1e3fd7f064543c9a94d8f52e8cbeb025296bb2ea917a75e9c8c9539b05baeae93cb5bd9d09174cde72fbe59f71bb0ece167ac460d6298eed421c7f3d5760f6c7f5e150cdc512085b7751e7e825a43def4b66285612291d2e0e545911cb43476cf0d445a3c2c5d7b1fe3720f535a844dab8462a4c11ebd5565249f67304f60d4f27b34206f79eb5ba22ea8858075bea82c71f90ad11d4db44f35ea33440d5c89a0a44b576ed6345a26c448a8eae8f2e565bab2e24c795d88aa03f880aedeacea4f4625acce2bb41127419d84d57b9a74d1cd8374831126a2c2a647d37947c3afd8776e84ef8082733bdf3a8172a529844cec5cfff76ef68daa003b04160fda26a9abd92bb89d2e681ba8676613372c98f0f2b776d78ab69d3e9b80066b0a9f28671191690e399f9b8df1ceef0aa114362be0747afa3d219d3d7fc5a122e4e0cbeb499858383a8bd198afe37ee3870cfc7e517e8b3d5d26af850cddc3a2c6b40679d940ecf51f46e8c9fce38fe00c41b31c04a2217c8510e65df16abff8ed5408b815afd78f39d8201d017c39b671061cfc1a1f5be75aef9fa78be8ba5b6ae49389460f6fb339949880b0b1fb132282bcf39837023f70be83add65107b28d02d041a7bdaedf5aa1190455da606c619702ca04010996ed7da0fca5ebf46767a8871c13f6562cbf7ddbc9cf5737c4db8ca20ab550538c66aa6894a95ee83b2fd420cdc9c08d9a29cebed045c7459757414984763e423678c260e2712d60ccb6b1333300649e5a9520dd0b61ef1d966fae7942d2eb1acbc673a74ddce1b1e772f5a0183daf11aa2491e51077c9d57d7d30c19c4361fbed25090ff0021ad599e31aded07bd074d07126cffd146fb69f8dd9069d34f7ea049c6dd3756f36a3eb8eaad57e67de82b2f15308160c4b51dba9da3560646bbd4a1828bc41d4f551bfc5ed756b0126fbbd07e09714b60a6b049f39d959fbcb6082550c857dd641cebf479951ba47e2733e9cebde672fd5a46246dabe54b44c8ecd9cb0163d93cd1aafdd36997e0e24708382391fdfa52b6c7a160fc4f9151ec7637a63bd01b3f29b4511652d46460ccf39c0b0c12cdd5249c12e1549eb80bc0d06e7a268c2d8c666244431908fba12fc6dfa99f9a27ff5f2ec672b8300b674f7af8147e383434568656a1f76f0a167ca9b5e39bf76886e54671107329c653da670a0a23be54b8bdfd54793ea6d757f2a990b8d14b867683e1cc68c0bc197e2a80f970e556b7d1adac13eb630183e9df6139437ebd5344e31450fc4d6b5f2d2d8bfd49e8077ebbd6e46bc75b58f08bc93f7d5f9b16c3543e8d8ccb25bd6e99c5448e3b76593e289ad31b8a5b3a29ae8b07fd94dd682615631daf10ab5566c796f084f7349cfd1dfde91b64f82c4049bcbc895bccd17b9dd839ba5ea22a39d5a1bcb6311e0abb85f86c75eb9991af874d1f10802e46db3bf05cdd7de58b58d583c3fe8445ea78de504d6d3fe66e1992f9b67a800a6cead3932c7bb470b9490b3b9d9dbab969f8e745d6a84ee47a6f71ca1a72d6d11a2da8b0a43e20c2a2c4104f42135b6ce58d57099843b31d50c5cf2c7c03f6f8281ac91132726912850abb7b5935b6c7f85d5d824e4cdf9bf0c36264d4d206409c74a9ab13a6fa80903034969bc974b85c8b6f635b44aafed0465048cfd41c9aef831b12adb878e01f8e0f499b900d5f9b3770adddbe39b92c7a76e6cc57fb3a48a03a9293b0abf42e8aa74fd4cedbcb335b90541b075c6792d34ef3c605b5799561b33bb886bfbbfe72fb1d5e3e1520ea21d0b9d49792b5533ca890723abfa36a6b623541601380394d66907270d9d80babf826e5d572988a0a7f086c92bc6bb7e7d32475ba192532b2e27fd2827ce4e4a8bb7d9000e54c509c901373c12fb7b3bcafafe736a59d75cc5ce801c0ada6ec5a575d02ba91f527029003ec4e206d3abbb2f41b799751d55c869f9bf62a8226b5802b56768b720d273a815b03d451eff8bd8b49c1050fa65812dd5de8513e75d0ca2f01b59e698aa6acdd4b7e646c20e270b5d46bb8d3c42420b753daf8daeea741196727f61fb87780b8da546158e511bb5179457ef5d2aba5f7df3d3d51f21a4de6a57f13ad7718690989184c981e773fa5a41854c8c7c001d9f10fedbdf7513797a67fe117ac8a3c3b9bbdda2be33e605d459fbd4f24ec02ed1eadb119e293063651ccbc4ea9e7d96e8d074d41fe210f16d6f581c8ff52a16f8d63c75869d5e5bc40dab345657b6f9e092e4f4d5f8281f538efa20f85263d4cc9a5df3a7339b41b24d2d0364dfd1a7cf882eff482284ab33a7f9f1d4dfc85540171930ae5180bff625b60066b67553c191b01966cfa49ada70be744bb1963d71f15bc3d49d63e933497a67f7e17222d4f33ba6c6c1e816e6d2277402e9af6eff1a6eb4af978eb09f98888099994519dbb4ad321f5b7b9738bd0397c2973f2daed911c5ab643940a9d59e06fb935107acae67ed9c59bc5618ca0ffa4ddacae04d2fdd0a8238dda9ae94e16250f1708d0ae0da9dd401263e54f1e6001a6bcd3d8cba81c766353ec3d1c7e59eaca9bd2cf4419e8f9b91c2599e6fdc1ebd85137ae3c68d2809d8f752b1d325c139b4d45677443dd5cb91c119d430095b2b86199cddd1e4f396f2f3b558ccba5f54c2eb6af87894949a5d56ff67c38530a84b48d8decd25bfb9f7b4e2f89ac182a27cc05f2e6bddc4bf2b93d80ba7b8092b84de728bf96ffe63f2877d9ad8c5738e04b2dd6994ecd6ffaf88626cad9341b4cdbff24edfcdaa6c6c47b8428ff179e43bf9de23d12142505ab6c078290da5d651f33ec93e6ccf9d776e210ea164247a463f54dddc2e20b5373ceddcca36887c7cc136e621b24f4aa90cbc7162a098a4b8a89f9833669f08a9443af06a122db4930cf5caba7e89785822cca0d463e18782774ae2d2d0102881ea566839b742b967092b20c816bda130602cb19faaa3903425ac0c68900f0f8dc34194371fb23d39c2737766200d4aef1b3b71d2418423cf59c348bb7493277cf8d80f54a1bc9e24f1cd55d38a22bdcab0bc0c33986fdf15d221b9439145a1caf9124250a74177dc93c9356ad164521d8757e5a6dc1e60e27ecf0560ee45e68c01db0c9509cdd5e1e98f77c788840a9ae14abf99a1082186657f8a7ddf15dcf1177b504c81c649bc9139f53d11dfa3e11abce63e39645c5ba5c4d07957d39f320238a1bd25bfd61073b146399ff2ce2920603747222e79feaf963a21c8791122cff39e98e6b372541797ba06e806369769d3c378eaabb6f9acd8aa67fc8de4f3ef6b79b47c3678c6b01623f4987b7451c2843bf640a2d61a7ea5d988b5b3075d9678f6b199f88e5b1472cbd9631247ed3771d685a960a3bdc6dd545203f41e712d703d67e26befe10cd68dda72dac86640da9ff4e34e664b41e61ef45325b470245f2bd84245f4e290b5f8366bab1ea91daaf57821d1065c230b1d6330ad0623275b87ef01f7947a7f5c90ea547538ea416aa7b6e46e90c15ce2080c5c22e1618a591e34ca49436a6f343ca03d891d91d4101621df34431a0bbf95d301d0fb37c916549e4754f93ade21be3077cbc616bfad116730a3c498eded4633009fa2568b8d0dda98e6ec39e0fe7607dc34e558eb12738012daff7c323b78eb494860ed57e20cd11ec0fdba287617073789f54324ee0cedd8f67cb82b9df242255da2a14faf4e628ebd2f974154d78bc7f06c141a07eb974a3ea126fabca632687bcb9c1827dbf8a35e03b0a39197d2db7c4c313dde44a14979fe572befb95deaab5cb2ccb9144737acb56f7672be35a1f466249cd5eed68bd27a1a9e9d2e88457b28e1eab1d2053a5f1ad8cfaa713d607b8c115ea93dd97325c6fe4dc808058d8bf231c250cf59638283829ea2b5822f09fd922d968ca6a4996f259c1877dde5ef5406b42660bd735700d6e3311a673763fe728fbecd20aca83777f9d3929c766e57d7f1cc321b251685ae2855a4dec71b3a93a14b16bed2ba7d51a97b7c451da925fcd44b5f05466c9780a627688abaed397baa4e2036457b2ca37f08ef6edac6cc078bc6ab229daf06f06971c79244e386d31176f6709108abdf2d7b86a004e9232c07a8a0c25acc92b8cea4c39e489f03256fdba0c6946a57b0895df98450c0703b9ca782b0d7c230be7d5fe451d95efd2f46f8af54fa1dc724154ffb63e8b951fc9d939788cf0a2d9e8d5a6681aa9d586053c1378b75ee1cd1b613fc75218eeca9919c1110455316c3d4cb928ae055e2331c6245b2a7d9ddd568ada708a7e38a21e1596eceeca98bffeb945ed379048861a1a99e829e79a333e1f0a44b044d8725de17addf284122b6d48acdf701bf48993299832679c5d7e29020620101a87cb4ecbf7fe1082624dc85d62ba9de2b4b0a1cea6d2e49997693403c0a6a6bb6150291feec679b3ea5fad52d39572aa0dd8ba4ad3ddbd65247f4ddbfb4d831e73a12502f419f578d329ccda37352d4fa321e3e8b28c3ad4a38c4e447800ce6a98c6b177cacbf87921480269065211e56039529a9955ba7548a6c4c7fa209af8c003cde956b3e1219a50888ecdbb36444cd6c04892ae1b76031184b339cdf0d662970882fc9ead9899ec0634de6d7f17db01a77d63d6a8a33ba32b38e297d264d08aeec30b97d5f5d39444816d3490d0e082707d02ffaa166b41a9d0a1ca45ea1e6632383bed8e1a95262de632e04c6806ed5cf0bf11104ef3f607edc904b7303f11ae9f1f2f6b90d48769545a2810b0f3aaa4b6966247a774bb0f4fda411892221ff207da7e0754a6069d46a9341ce5a28a4b15f2f891fd2b6afde67c9bfb58288df47e6b862e26c00605a828e7bf36c7adb5d76ee2449c4dedc0839e880fc0ae716599d907f2034caeefc5cd23afa201536a937b2e23ab4359389160f4ff7da6d9f6bc4cc230abe44e3de1401f6ed365f11a3c505fc46cde8d2840f9ce0ac9770c514b54b85ae5a290fcd1ed1e57e009b994c38e65e45214a181e6cc2479871a94cc1fa97152ccae2279297dff2dc237c5fa79b95a39b26715e94338acbf25f0aa5ba9f58ff04cef54174f39bc731b7023a345b0f34b6fe7b0886cad85f93b339f061d02c36641bb3043c1167809165470d7d3fa49ac086d2a1143c5e5a7495212bf3ba3852ce0677274543d12d161193c", 0x1000}, {&(0x7f00000015c0)="0365a188e525a78b5a78f457006cc6f3e57da42898b3a9c5edb7f0e1bcb78cb1d3228ca4e9080bc8380147011679add57e64a6e9154b223e3b6ac37050400c6bbda08a6d81b1af6c73de11f32b73585af4e20d0af0ab0c27d39f0d556023ca990a28542a312a382fc33de2748af30f5545d89896ab676076261daeea5af503d78f8cfe71f1d574d1bb88f0a7bb305f8e87df069a160a8839dd0ad9c16c2e667564e69b7273ea734a18f7edc604ae512d9a7cd302f0a4b6ff6ef00cfcb1f2ed571105f35e7408511d2992d6b279a69fe45d8ce45ceee467d92d9cd43dda1d6af4aa67a2e5e7692658e9dcdaa14333e26b", 0xf0}], 0x6) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r1, 0xc) r4 = fcntl$dupfd(r3, 0x406, r1) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r5, 0xc) r7 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x24000, 0x107) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r8, 0x4c00, 0xffffffffffffffff) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) io_uring_enter(r7, 0x1292, 0x5a4c, 0x2, &(0x7f00000000c0)={[0x1]}, 0x8) fcntl$dupfd(r6, 0x406, r5) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r5) fallocate(r0, 0x3, 0x3, 0x8000008000) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) perf_event_open$cgroup(&(0x7f0000000140)={0x4, 0x80, 0xfb, 0x0, 0x8, 0x6b, 0x0, 0x7, 0x40000, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc288, 0x0, @perf_bp={&(0x7f0000000100), 0xa}, 0x0, 0x3fffffffc0, 0x8, 0x1, 0xffffffff, 0x7, 0x5b, 0x0, 0x5, 0x0, 0x7}, r9, 0x6, r0, 0xc) 13:54:11 executing program 4: r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), 0x0, 0x0, 0x3) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x2, 0x2, 0x6985) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001800210c000000ddfeffffff020000000800fe060000000000001aad364849d9a129008005000000da000000"], 0x28}}, 0x0) r4 = openat2(r3, &(0x7f0000000280)='./file1\x00', &(0x7f0000000340)={0x52ac0, 0x107, 0x14}, 0x18) ioctl$RNDZAPENTCNT(r4, 0x5204, &(0x7f0000000380)=0x7851669e) getdents64(r3, &(0x7f0000000140)=""/255, 0xff) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES16], 0x14}}, 0x4090) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x77359400}, {0x0, 0x3938700}}, 0x0) open_tree(r0, &(0x7f0000000100)='./file1\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005e380)={0x100000000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x40, "2aee4ced9c0309"}) unshare(0x48020200) 13:54:11 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 1) 13:54:11 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:11 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x0, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:54:11 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:11 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 13:54:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 19) 13:54:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x0, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:54:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 2) [ 2527.446252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2527.479150] FAULT_INJECTION: forcing a failure. [ 2527.479150] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.480410] CPU: 0 PID: 18945 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2527.481150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.482024] Call Trace: [ 2527.482319] dump_stack+0x107/0x167 [ 2527.482723] should_fail.cold+0x5/0xa [ 2527.483149] ? create_object.isra.0+0x3a/0xa20 [ 2527.483649] should_failslab+0x5/0x20 [ 2527.484071] kmem_cache_alloc+0x5b/0x310 [ 2527.484525] create_object.isra.0+0x3a/0xa20 [ 2527.485011] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2527.485564] kmem_cache_alloc+0x159/0x310 [ 2527.486138] __anon_vma_prepare+0x62/0x500 [ 2527.486594] ? __pte_alloc+0x194/0x330 [ 2527.487129] handle_mm_fault+0x2b2d/0x3500 [ 2527.487740] ? perf_trace_lock+0x2bd/0x490 [ 2527.488384] ? SOFTIRQ_verbose+0x10/0x10 [ 2527.488834] ? __pmd_alloc+0x5e0/0x5e0 [ 2527.489288] __get_user_pages+0x61b/0x1380 [ 2527.489876] ? follow_page_mask+0x1900/0x1900 [ 2527.490357] ? __lockdep_reset_lock+0x180/0x180 [ 2527.490979] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2527.491533] __get_user_pages_remote+0x1d5/0x870 [ 2527.492170] ? lock_downgrade+0x6d0/0x6d0 [ 2527.492670] get_user_pages_remote+0x63/0x90 [ 2527.493178] get_arg_page+0xba/0x200 [ 2527.493581] ? acct_arg_size+0xe0/0xe0 [ 2527.494103] ? downgrade_write+0x3a0/0x3a0 [ 2527.494589] ? count.constprop.0+0x1b3/0x290 [ 2527.495078] copy_string_kernel+0x1b4/0x450 [ 2527.495671] do_execveat_common+0x525/0x8d0 [ 2527.496183] ? bprm_execve+0x1a60/0x1a60 [ 2527.496764] __x64_sys_execveat+0xed/0x140 [ 2527.497234] do_syscall_64+0x33/0x40 [ 2527.497726] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2527.498311] RIP: 0033:0x7fac73041b19 [ 2527.498815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.500750] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2527.501760] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2527.502568] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2527.503321] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.504093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2527.504383] FAULT_INJECTION: forcing a failure. [ 2527.504383] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.504885] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2527.506552] CPU: 1 PID: 18948 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2527.507120] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2527.507792] Call Trace: [ 2527.508020] dump_stack+0x107/0x167 [ 2527.508324] should_fail.cold+0x5/0xa [ 2527.508648] ? create_object.isra.0+0x3a/0xa20 [ 2527.509022] should_failslab+0x5/0x20 [ 2527.509330] kmem_cache_alloc+0x5b/0x310 [ 2527.509664] create_object.isra.0+0x3a/0xa20 [ 2527.510022] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2527.510438] kmem_cache_alloc+0x159/0x310 [ 2527.510772] getname_flags.part.0+0x50/0x4f0 [ 2527.511136] getname_flags+0x9a/0xe0 [ 2527.511443] __x64_sys_execveat+0xd6/0x140 [ 2527.511792] do_syscall_64+0x33/0x40 [ 2527.512102] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2527.512515] RIP: 0033:0x7fde11765b19 [ 2527.512822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2527.514297] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2527.514925] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2527.515502] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2527.516077] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2527.516656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2527.517232] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:54:27 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f00000002c0)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$inet6(0xa, 0x803, 0x5) getsockopt$inet6_int(r3, 0x29, 0x38, &(0x7f00000063c0), &(0x7f0000006400)=0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ftruncate(r4, 0xffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x240000000, 0x3) sendfile(r4, r1, 0x0, 0x2000000020d315) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast2, @in=@rand_addr=0x64010102, 0x4e20, 0x7, 0x4e20, 0x0, 0x2, 0xa0, 0x0, 0x21}, {0x6, 0x8000, 0x800, 0x4, 0x3ff, 0x6, 0x0, 0xbff}, {0x1, 0x7, 0x8000000000003f, 0x99f3}, 0x6, 0x6e6bbb, 0x1, 0x0, 0x2, 0x1}, {{@in=@broadcast, 0x4d4, 0x2b}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x3, 0x1, 0x9, 0x3, 0x3ea1, 0x7}}, 0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES64=r1, @ANYRESDEC=r5], 0xfdef) getpgid(0x0) socket$packet(0x11, 0x3, 0x300) 13:54:27 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:27 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 20) 13:54:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 3) [ 2542.613895] FAULT_INJECTION: forcing a failure. [ 2542.613895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2542.615266] CPU: 0 PID: 18960 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2542.616038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2542.616965] Call Trace: [ 2542.617269] dump_stack+0x107/0x167 [ 2542.617690] should_fail.cold+0x5/0xa [ 2542.618130] strncpy_from_user+0x34/0x470 [ 2542.618604] getname_flags.part.0+0x95/0x4f0 [ 2542.619224] getname_flags+0x9a/0xe0 [ 2542.619646] __x64_sys_execveat+0xd6/0x140 [ 2542.620133] do_syscall_64+0x33/0x40 [ 2542.620548] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2542.621126] RIP: 0033:0x7fde11765b19 [ 2542.621584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.623834] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2542.624784] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2542.625668] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2542.626545] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.627412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2542.628288] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:54:27 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x0, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:54:27 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r1, 0xc) fcntl$dupfd(r2, 0x406, r1) ftruncate(r1, 0xf22778) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:54:27 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "29a51bfbda6f52af128eed8e85b05b5f2b465e504cc2176547f33a5778ec8ab5ea0afd5350cdce3bb439dfef0456eb33dcf3aa14e9386cc9645a4788364efd6cbe8dc51affd2cb665b8fef1f28a3edfeacbd1a3808d18fd543396d22cb041ddedc39503aaeed09ccdb1bf44dfb0107f1878bcb56e760f164f9e2b8841c9a1de4019e5f369ac6121c5cfbe8a8d62529c5cdc43dfa91926ed7647dacf952031ee4995ba28d770add9b4b2817cd6e980c65dfc02ad630cd3c1d3632bc4caed5e357487f17982fa24608168aa723a71e76683fe18ffa610068b1371571d3d527a59789b8a39f7aff488dfb7539698304966d7aeddd5cd8f959293ea299"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x4a, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@generic="65eed358f4"]}, 0x1c}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 13:54:27 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:27 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2542.658345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2542.660642] FAULT_INJECTION: forcing a failure. [ 2542.660642] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.662026] CPU: 0 PID: 18968 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2542.662767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2542.663658] Call Trace: [ 2542.663960] dump_stack+0x107/0x167 [ 2542.664365] should_fail.cold+0x5/0xa [ 2542.664805] ? __anon_vma_prepare+0x270/0x500 [ 2542.665315] should_failslab+0x5/0x20 [ 2542.665746] kmem_cache_alloc+0x5b/0x310 [ 2542.666218] __anon_vma_prepare+0x270/0x500 [ 2542.666704] ? __pte_alloc+0x194/0x330 [ 2542.667156] handle_mm_fault+0x2b2d/0x3500 [ 2542.667643] ? perf_trace_lock+0x2bd/0x490 [ 2542.668127] ? SOFTIRQ_verbose+0x10/0x10 [ 2542.668569] ? __pmd_alloc+0x5e0/0x5e0 [ 2542.669054] __get_user_pages+0x61b/0x1380 [ 2542.669550] ? follow_page_mask+0x1900/0x1900 [ 2542.670062] ? __lockdep_reset_lock+0x180/0x180 [ 2542.670563] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2542.671089] __get_user_pages_remote+0x1d5/0x870 [ 2542.671604] ? lock_downgrade+0x6d0/0x6d0 [ 2542.672084] get_user_pages_remote+0x63/0x90 [ 2542.672594] get_arg_page+0xba/0x200 [ 2542.673025] ? acct_arg_size+0xe0/0xe0 [ 2542.673467] ? downgrade_write+0x3a0/0x3a0 [ 2542.673948] ? count.constprop.0+0x1b3/0x290 [ 2542.674453] copy_string_kernel+0x1b4/0x450 [ 2542.674956] do_execveat_common+0x525/0x8d0 [ 2542.675457] ? bprm_execve+0x1a60/0x1a60 [ 2542.675943] __x64_sys_execveat+0xed/0x140 [ 2542.676434] do_syscall_64+0x33/0x40 [ 2542.676862] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2542.677442] RIP: 0033:0x7fac73041b19 [ 2542.677862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.679909] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2542.680767] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2542.681568] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2542.682365] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.683165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2542.683959] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:54:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 4) 13:54:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) 13:54:27 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x2e, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d6f4655f000000000000000001000000000000000b0000000001000008000000d2420000120300000000000000000000000000000000000073797a6b616c6c6572000000000000002f746d702f73797a2d696d61676567656e31333638353234303200"/192, 0xc0, 0x400}, {&(0x7f0000010100)="0000000000000000000000008395006fb905454792d9f392427055b7010040000c00000000000000d6f4655f00"/64, 0x40, 0x4e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000200020000100000000000000000000000000000000000000040000003700000000000000", 0x40, 0x540}, {&(0x7f0000010300)="030000000400"/32, 0x20, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010500)="ff030000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0100ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000d6f4655fd6f4655fd6f4655f00"/2080, 0x820, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d6f4655fd7f4655fd7f4655f00000000000004002000000000000800050000000af301000400000000000000000000000100000010000000", 0x40, 0x1500}, {&(0x7f0000010f00)="2000000098a2e27a98a2e27a00000000d6f4655f00"/32, 0x20, 0x1580}, {&(0x7f0000011000)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000300000000200000004000000320000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x1600}, {&(0x7f0000011100)="8081000000180000d6f4655fd6f4655fd6f4655f00000000000001002000000010000800000000000af3020004000000000000000000000002000000400000000200000004000000420000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000d6f4655f00"/160, 0xa0, 0x1700}, {&(0x7f0000011200)="c041000000300000d6f4655fd6f4655fd6f4655f00000000000002002000000000000800000000000af301000400000000000000000000000c00000020000000", 0x40, 0x1e00}, {&(0x7f0000011300)="20000000000000000000000000000000d6f4655f00"/32, 0x20, 0x1e80}, {&(0x7f0000011400)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800030000000af3010004000000000000000000000001000000500000000000000000000000000000000000000000000000000000000000000000000000000000005bbc60cd0000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x1f00}, {&(0x7f0000011500)="ed8100001a040000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af301000400000000000000000000000200000060000000000000000000000000000000000000000000000000000000000000000000000000000000491c1dd40000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x2000}, {&(0x7f0000011600)="ffa1000026000000d7f4655fd7f4655fd7f4655f00000000000001000000000000000000010000002f746d702f73797a2d696d61676567656e3133363835323430322f66696c65302f66696c6530000000000000000000000000000000000000000000008a6df6170000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x2100}, {&(0x7f0000011700)="ed8100000a000000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af301000400000000000000000000000100000070000000000000000000000000000000000000000000000000000000000000000000000000000000b53044900000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000000002ea06015400000000000600000000000000786174747231000006014c0000000000060000000000000078617474723200000000000000000000000000000000000000000000000000000000000078617474723200007861747472310000ed81000028230000d7f4655fd7f4655fd7f4655f00000000000002002000000000000800010000000af30100040000000000000000000000090000008000000000000000000000000000000000000000000000000000000000000000000000000000000059a976290000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0x1a0, 0x2200}, {&(0x7f0000011900)="ed81000064000000d7f4655fd7f4655fd7f4655f00000000000001002000000000000800010000000af3010004000000000000000000000001000000900000000000000000000000000000000000000000000000000000000000000000000000000000002248c6120000000000000000000000000000000000000000000000002000000098a2e27a98a2e27a98a2e27ad7f4655f98a2e27a0000000000000000", 0xa0, 0x2400}, {&(0x7f0000011a00)="020000000c0001022e000000020000000c0002022e2e00000b00000014000a026c6f73742b666f756e6400000c0000001000050266696c65300000000f0000001000050166696c6531000000100000001000050166696c6532000000100000001000050166696c6533000000110000009403090166696c652e636f6c64000000", 0x80, 0x4000}, {&(0x7f0000011b00)="0b0000000c0001022e00000002000000f40302022e2e00"/32, 0x20, 0x8000}, {&(0x7f0000011c00)="00000000000400"/32, 0x20, 0x8400}, {&(0x7f0000011d00)="00000000000400"/32, 0x20, 0x8800}, {&(0x7f0000011e00)="00000000000400"/32, 0x20, 0x8c00}, {&(0x7f0000011f00)="00000000000400"/32, 0x20, 0x9000}, {&(0x7f0000012000)="00000000000400"/32, 0x20, 0x9400}, {&(0x7f0000012100)="00000000000400"/32, 0x20, 0x9800}, {&(0x7f0000012200)="00000000000400"/32, 0x20, 0x9c00}, {&(0x7f0000012300)="00000000000400"/32, 0x20, 0xa000}, {&(0x7f0000012400)="00000000000400"/32, 0x20, 0xa400}, {&(0x7f0000012500)="00000000000400"/32, 0x20, 0xa800}, {&(0x7f0000012600)="00000000000400"/32, 0x20, 0xac00}, {&(0x7f0000012700)="111fc0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0xc000}, {&(0x7f0000012800)="0200"/32, 0x20, 0xc400}, {&(0x7f0000012900)="0300"/32, 0x20, 0xc800}, {&(0x7f0000012a00)="0400"/32, 0x20, 0xcc00}, {&(0x7f0000012b00)="0500"/32, 0x20, 0xd000}, {&(0x7f0000012c00)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0xd400}, {&(0x7f0000012d00)="2719c0d901000000803a0900803a090000000000060000000000000005000000", 0x20, 0x10000}, {&(0x7f0000012e00)="0200"/32, 0x20, 0x10400}, {&(0x7f0000012f00)="0300"/32, 0x20, 0x10800}, {&(0x7f0000013000)="0400"/32, 0x20, 0x10c00}, {&(0x7f0000013100)="0500"/32, 0x20, 0x11000}, {&(0x7f0000013200)="0000000000000000010000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000c00100"/96, 0x60, 0x11400}, {&(0x7f0000013300)="0c0000000c0001022e000000020000000c0002022e2e00000d0000001000050166696c65300000000e000000d803050766696c653100"/64, 0x40, 0x14000}, {&(0x7f0000013400)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkal\x00\x00\x00\x00\x00\x00', 0x420, 0x18000}, {&(0x7f0000013900)='syzkallers\x00'/32, 0x20, 0x1c000}, {&(0x7f0000013a00)='syzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallersyzkallers\x00'/128, 0x80, 0x24000}], 0x0, &(0x7f0000013b00)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40, 0x10) [ 2542.755769] FAULT_INJECTION: forcing a failure. [ 2542.755769] name failslab, interval 1, probability 0, space 0, times 0 [ 2542.757189] CPU: 0 PID: 18980 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2542.757966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2542.758897] Call Trace: [ 2542.759204] dump_stack+0x107/0x167 [ 2542.759627] should_fail.cold+0x5/0xa [ 2542.760068] ? alloc_bprm+0x51/0x8f0 [ 2542.760499] should_failslab+0x5/0x20 [ 2542.760939] kmem_cache_alloc_trace+0x55/0x320 [ 2542.761458] ? lock_downgrade+0x6d0/0x6d0 [ 2542.761940] alloc_bprm+0x51/0x8f0 [ 2542.762358] do_execveat_common+0x275/0x8d0 [ 2542.762852] ? strncpy_from_user+0x9e/0x470 [ 2542.763322] ? bprm_execve+0x1a60/0x1a60 [ 2542.763793] __x64_sys_execveat+0xed/0x140 [ 2542.764288] do_syscall_64+0x33/0x40 [ 2542.764715] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2542.765303] RIP: 0033:0x7fde11765b19 [ 2542.765710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2542.767760] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2542.768617] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2542.769424] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2542.770223] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2542.771025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2542.771822] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2555.716926] FAULT_INJECTION: forcing a failure. [ 2555.716926] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.718459] CPU: 0 PID: 19001 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2555.719436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2555.720368] Call Trace: [ 2555.720670] dump_stack+0x107/0x167 [ 2555.721113] should_fail.cold+0x5/0xa [ 2555.721541] ? create_object.isra.0+0x3a/0xa20 [ 2555.722067] should_failslab+0x5/0x20 [ 2555.722493] kmem_cache_alloc+0x5b/0x310 [ 2555.722967] create_object.isra.0+0x3a/0xa20 [ 2555.723459] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2555.724046] kmem_cache_alloc+0x159/0x310 [ 2555.724517] __anon_vma_prepare+0x270/0x500 [ 2555.725033] ? __pte_alloc+0x194/0x330 [ 2555.725476] handle_mm_fault+0x2b2d/0x3500 [ 2555.725970] ? perf_trace_lock+0x2bd/0x490 [ 2555.726447] ? SOFTIRQ_verbose+0x10/0x10 [ 2555.726907] ? __pmd_alloc+0x5e0/0x5e0 [ 2555.727389] __get_user_pages+0x61b/0x1380 [ 2555.727884] ? follow_page_mask+0x1900/0x1900 [ 2555.728408] ? __lockdep_reset_lock+0x180/0x180 [ 2555.728941] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2555.729491] __get_user_pages_remote+0x1d5/0x870 [ 2555.730045] ? lock_downgrade+0x6d0/0x6d0 [ 2555.730531] get_user_pages_remote+0x63/0x90 [ 2555.731045] get_arg_page+0xba/0x200 [ 2555.731467] ? acct_arg_size+0xe0/0xe0 [ 2555.731899] ? downgrade_write+0x3a0/0x3a0 [ 2555.732389] ? count.constprop.0+0x1b3/0x290 [ 2555.732902] copy_string_kernel+0x1b4/0x450 [ 2555.733413] do_execveat_common+0x525/0x8d0 [ 2555.733903] ? bprm_execve+0x1a60/0x1a60 [ 2555.734394] __x64_sys_execveat+0xed/0x140 [ 2555.734890] do_syscall_64+0x33/0x40 [ 2555.735330] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2555.735903] RIP: 0033:0x7fac73041b19 [ 2555.736333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.738391] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2555.739263] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2555.740065] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2555.740855] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.741661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2555.742467] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:54:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 5) 13:54:40 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) 13:54:40 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000005e80)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000005f00)='net/nfsfs\x00') write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r3, 0xc) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005d80)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/69, 0x45}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x2, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000001400), 0x6e, &(0x7f0000002500)=[{&(0x7f0000001480)=""/101, 0x65}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x2, &(0x7f0000002540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x140}}, {{&(0x7f0000002680), 0x6e, &(0x7f0000005bc0)=[{&(0x7f0000002700)=""/161, 0xa1}, {&(0x7f00000027c0)=""/180, 0xb4}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/235, 0xeb}, {&(0x7f0000004980)=""/186, 0xba}, {&(0x7f0000004a40)=""/142, 0x8e}, {&(0x7f0000004b00)=""/4096, 0x1000}, {&(0x7f0000005b00)=""/108, 0x6c}, {&(0x7f0000005b80)=""/35, 0x23}], 0xa, &(0x7f0000005c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}}], 0x3, 0x40000040, &(0x7f0000005e40)) fcntl$dupfd(r4, 0x406, r3) fallocate(r3, 0x8, 0xb64, 0x100) syz_io_uring_setup(0xd82, &(0x7f00000000c0)={0x0, 0x54a1, 0x2, 0x1, 0x1ad, 0x0, r2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 13:54:40 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) acct(0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8) ppoll(&(0x7f0000000080)=[{r1, 0x2300}, {r3, 0x382}, {r0, 0xd000}], 0x3, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0xff]}, 0x8) 13:54:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 21) 13:54:40 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x4a, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@generic="65eed358f4"]}, 0x1c}}, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)) 13:54:40 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2555.782092] FAULT_INJECTION: forcing a failure. [ 2555.782092] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.783120] CPU: 1 PID: 18992 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2555.783672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2555.784334] Call Trace: [ 2555.784557] dump_stack+0x107/0x167 [ 2555.784861] should_fail.cold+0x5/0xa [ 2555.785190] ? create_object.isra.0+0x3a/0xa20 [ 2555.785559] should_failslab+0x5/0x20 [ 2555.785866] kmem_cache_alloc+0x5b/0x310 [ 2555.786200] create_object.isra.0+0x3a/0xa20 [ 2555.786550] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2555.786955] kmem_cache_alloc_trace+0x151/0x320 [ 2555.787338] ? lock_downgrade+0x6d0/0x6d0 [ 2555.787672] alloc_bprm+0x51/0x8f0 [ 2555.787979] do_execveat_common+0x275/0x8d0 [ 2555.788335] ? strncpy_from_user+0x9e/0x470 [ 2555.788680] ? bprm_execve+0x1a60/0x1a60 [ 2555.789024] __x64_sys_execveat+0xed/0x140 [ 2555.789370] do_syscall_64+0x33/0x40 [ 2555.789678] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2555.790090] RIP: 0033:0x7fde11765b19 [ 2555.790393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.791922] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2555.792523] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2555.793118] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2555.793445] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2555.793697] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.793714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2555.796371] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:54:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) 13:54:40 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r2 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x0, 0x7f, 0x1, 0x1ff, 0x3, 0x6, 0x0, 0x98, 0x40, 0x1a1, 0x545, 0x7, 0x38, 0x1, 0x0, 0xff, 0x716f}, [{0x7, 0x7a, 0x0, 0x15, 0x4, 0x15d, 0x100, 0x5}, {0x7, 0x40, 0x2, 0x20000000000000, 0x8000, 0x80000000, 0xe37d, 0x3}], "a62750d99a29a2ee1787c082f8eaa668dcf0ca86b4910788e56e5fceb933ca0dbfbc6ad3eb04a2e4877b6a45a0af56fc0bece7e182a0bf61bd7f604f831d64afe06d3527a5b42c72510cede833015aa99d5df887d2f54e0b265879d6486cc2da6b9b9884bce3ee3a58e02f5cf39896487a727224a65d932299676b29754e12d504f617620a317339f6e7404ed0e61b63a9d6e9c6059c624e6c5f9f6733d613374c5a5483f0456769f876484a923af2cf54634bdf", ['\x00', '\x00', '\x00']}, 0x464) r3 = gettid() kcmp(0x0, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r2, r3, 0x18) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) get_robust_list(r4, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) fcntl$setown(r1, 0x8, r2) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:54:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 6) 13:54:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:54:40 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2c2a4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x0, 0x3, 0x8000008000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc0180, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x567, 0x1, &(0x7f00000000c0)="99f951d2503f375d2c3ff7ef1d1513fddf08487635768ce5b46b14e2abcb1be9e96c7261732bb273dc5de229cc24c46f0ce9a0e231c6bdc406a927d78a849ad5f7451fb69554175874", 0x80, 0x0, 0x0, {0x1}}, 0x2) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f00000001c0)=0xfffffc00) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$RTC_WIE_OFF(r1, 0x7010) [ 2555.921427] FAULT_INJECTION: forcing a failure. [ 2555.921427] name failslab, interval 1, probability 0, space 0, times 0 [ 2555.922391] CPU: 1 PID: 19019 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2555.922948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2555.923625] Call Trace: [ 2555.923847] dump_stack+0x107/0x167 [ 2555.924169] should_fail.cold+0x5/0xa [ 2555.924476] ? mm_alloc+0x19/0xd0 [ 2555.924767] should_failslab+0x5/0x20 [ 2555.925099] kmem_cache_alloc+0x5b/0x310 [ 2555.925436] ? kasan_unpoison_shadow+0x33/0x50 [ 2555.925810] mm_alloc+0x19/0xd0 [ 2555.926096] alloc_bprm+0x1cb/0x8f0 [ 2555.926393] do_execveat_common+0x275/0x8d0 [ 2555.926750] ? strncpy_from_user+0x9e/0x470 [ 2555.927107] ? bprm_execve+0x1a60/0x1a60 [ 2555.927446] __x64_sys_execveat+0xed/0x140 [ 2555.927795] do_syscall_64+0x33/0x40 [ 2555.928113] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2555.928518] RIP: 0033:0x7fde11765b19 [ 2555.928817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2555.930309] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2555.930914] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2555.931493] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2555.932061] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2555.932627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2555.933215] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:54:40 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) r2 = fcntl$dupfd(r1, 0x0, r0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x52, 0xc21, 0x70bd2d, 0x0, {0x7}}, 0x14}}, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x0) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x1ec, 0x27, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@generic="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", @generic="21a89866", @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x9186}, @generic="d020d587d9e0cfd235b4c59adf280138d2ba2c95be8c7f9754f82eb473cdb22a857b56fe6b49", @typed={0x8, 0x7b, 0x0, 0x0, @fd=r4}, @generic="0c2436d4da46be48d2d6fd7d1d1a8ce16c87f33f259d1da8cb68bc0b7f9f2dcb00fa82ce053707724444d723bfd4e2943ccc243b034bb1e6e9d6a8fdd89210976931163815f378f70ee8f19aeef6a9309d8b33c1e7f5abf725d53cc13d39480119633219e4ebc06f0a7247e041484bc4579c197bd5d81ad02541fd544a26c23665514e038058572df97682b8214a568970419e24c5fd8468b618a8e9087654"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4}, 0x40) 13:55:01 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:01 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 7) 13:55:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x40, "976ae46d07d1812fd0664e95dee18314b91d"}}]}, 0x150}}, 0x0) 13:55:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 22) 13:55:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x1c, 0x4a, 0xc21, 0x0, 0x0, {0xa, 0x0, 0x2}, [@generic="65eed358f4"]}, 0x1c}}, 0x0) 13:55:01 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x8000, 0x4000000000007f}, 0x0, 0xffffffffffffffff, r1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) [ 2576.982764] FAULT_INJECTION: forcing a failure. [ 2576.982764] name failslab, interval 1, probability 0, space 0, times 0 [ 2576.983981] CPU: 1 PID: 19044 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2576.984650] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2576.985445] Call Trace: [ 2576.985707] dump_stack+0x107/0x167 [ 2576.986070] should_fail.cold+0x5/0xa [ 2576.986455] ? create_object.isra.0+0x3a/0xa20 [ 2576.986907] should_failslab+0x5/0x20 [ 2576.987281] kmem_cache_alloc+0x5b/0x310 [ 2576.987688] create_object.isra.0+0x3a/0xa20 [ 2576.988116] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2576.988614] kmem_cache_alloc+0x159/0x310 [ 2576.989021] mm_alloc+0x19/0xd0 [ 2576.989351] alloc_bprm+0x1cb/0x8f0 [ 2576.989713] do_execveat_common+0x275/0x8d0 [ 2576.990136] ? strncpy_from_user+0x9e/0x470 [ 2576.990551] ? bprm_execve+0x1a60/0x1a60 [ 2576.990965] __x64_sys_execveat+0xed/0x140 [ 2576.991406] do_syscall_64+0x33/0x40 [ 2576.991785] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2576.992275] RIP: 0033:0x7fde11765b19 [ 2576.992635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2576.994378] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2576.995111] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2576.995787] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2576.996464] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2576.997166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2576.997450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2576.997856] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2577.013401] FAULT_INJECTION: forcing a failure. [ 2577.013401] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2577.015219] CPU: 0 PID: 19041 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2577.016269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.017529] Call Trace: [ 2577.017944] dump_stack+0x107/0x167 [ 2577.018632] should_fail.cold+0x5/0xa [ 2577.019289] __alloc_pages_nodemask+0x182/0x600 [ 2577.020001] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2577.020913] ? up_write+0x191/0x550 [ 2577.021489] ? rwlock_bug.part.0+0x90/0x90 [ 2577.022140] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2577.022970] alloc_pages_vma+0xbb/0x410 [ 2577.023591] handle_mm_fault+0x152f/0x3500 [ 2577.024227] ? perf_trace_lock+0x2bd/0x490 [ 2577.024893] ? SOFTIRQ_verbose+0x10/0x10 [ 2577.025526] ? __pmd_alloc+0x5e0/0x5e0 [ 2577.026160] __get_user_pages+0x61b/0x1380 [ 2577.026826] ? follow_page_mask+0x1900/0x1900 [ 2577.027512] ? __lockdep_reset_lock+0x180/0x180 [ 2577.028218] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2577.028947] __get_user_pages_remote+0x1d5/0x870 [ 2577.029679] ? lock_downgrade+0x6d0/0x6d0 [ 2577.030319] get_user_pages_remote+0x63/0x90 [ 2577.030997] get_arg_page+0xba/0x200 13:55:01 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2577.031563] ? acct_arg_size+0xe0/0xe0 [ 2577.032294] ? downgrade_write+0x3a0/0x3a0 [ 2577.032968] ? count.constprop.0+0x1b3/0x290 [ 2577.033687] copy_string_kernel+0x1b4/0x450 [ 2577.034389] do_execveat_common+0x525/0x8d0 [ 2577.035081] ? bprm_execve+0x1a60/0x1a60 [ 2577.035755] __x64_sys_execveat+0xed/0x140 [ 2577.036399] do_syscall_64+0x33/0x40 [ 2577.036989] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2577.037791] RIP: 0033:0x7fac73041b19 [ 2577.038379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.041250] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2577.042444] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2577.043560] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2577.044668] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.045786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2577.046895] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:55:01 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 8) 13:55:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x40, "976ae46d07d1812fd0664e95dee18314b91d"}}]}, 0x150}}, 0x0) 13:55:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 23) 13:55:01 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:01 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x11208513, @empty, 0xbec}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r3 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x404040) setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000100)=0x3f, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4712d520085aba68) 13:55:01 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000002c0)={0x200000, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), {0x1a}, &(0x7f0000000140)=""/96, 0x60, &(0x7f00000001c0)=""/130, &(0x7f0000000280)=[0x0, 0xffffffffffffffff], 0x2, {r0}}, 0x58) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0xffffffff00000000, 0x8000008000) [ 2577.160810] FAULT_INJECTION: forcing a failure. [ 2577.160810] name failslab, interval 1, probability 0, space 0, times 0 [ 2577.161786] CPU: 1 PID: 19059 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2577.162332] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.162974] Call Trace: [ 2577.163191] dump_stack+0x107/0x167 [ 2577.163484] should_fail.cold+0x5/0xa [ 2577.163800] ? create_object.isra.0+0x3a/0xa20 [ 2577.164168] should_failslab+0x5/0x20 [ 2577.164489] kmem_cache_alloc+0x5b/0x310 [ 2577.164836] create_object.isra.0+0x3a/0xa20 [ 2577.165223] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2577.165634] kmem_cache_alloc+0x159/0x310 [ 2577.165971] mm_alloc+0x19/0xd0 [ 2577.166235] alloc_bprm+0x1cb/0x8f0 [ 2577.166528] do_execveat_common+0x275/0x8d0 [ 2577.166878] ? strncpy_from_user+0x9e/0x470 [ 2577.167222] ? bprm_execve+0x1a60/0x1a60 [ 2577.167572] __x64_sys_execveat+0xed/0x140 [ 2577.167910] do_syscall_64+0x33/0x40 [ 2577.168206] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2577.168623] RIP: 0033:0x7fde11765b19 [ 2577.168917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.170378] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2577.170975] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2577.171543] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2577.172099] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.172669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2577.173257] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2577.180514] FAULT_INJECTION: forcing a failure. [ 2577.180514] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2577.181479] CPU: 1 PID: 19061 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2577.182021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2577.182675] Call Trace: [ 2577.182893] dump_stack+0x107/0x167 [ 2577.183194] should_fail.cold+0x5/0xa [ 2577.183504] __alloc_pages_nodemask+0x182/0x600 [ 2577.183881] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2577.184379] ? up_write+0x191/0x550 [ 2577.184676] ? rwlock_bug.part.0+0x90/0x90 [ 2577.185018] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2577.185458] alloc_pages_vma+0xbb/0x410 [ 2577.185776] handle_mm_fault+0x152f/0x3500 [ 2577.186120] ? perf_trace_lock+0xac/0x490 [ 2577.186455] ? SOFTIRQ_verbose+0x10/0x10 [ 2577.186791] ? __pmd_alloc+0x5e0/0x5e0 [ 2577.187117] __get_user_pages+0x61b/0x1380 [ 2577.187464] ? follow_page_mask+0x1900/0x1900 [ 2577.187817] ? __lockdep_reset_lock+0x180/0x180 [ 2577.188201] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2577.188582] __get_user_pages_remote+0x1d5/0x870 [ 2577.188955] ? lock_downgrade+0x6d0/0x6d0 [ 2577.189305] get_user_pages_remote+0x63/0x90 [ 2577.189666] get_arg_page+0xba/0x200 [ 2577.189964] ? acct_arg_size+0xe0/0xe0 [ 2577.190280] ? downgrade_write+0x3a0/0x3a0 [ 2577.190612] ? count.constprop.0+0x1b3/0x290 [ 2577.190962] copy_string_kernel+0x1b4/0x450 [ 2577.191315] do_execveat_common+0x525/0x8d0 [ 2577.191655] ? bprm_execve+0x1a60/0x1a60 [ 2577.191988] __x64_sys_execveat+0xed/0x140 [ 2577.192335] do_syscall_64+0x33/0x40 [ 2577.192641] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2577.193048] RIP: 0033:0x7fac73041b19 [ 2577.193351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2577.194787] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2577.195383] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2577.195939] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2577.196499] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2577.197061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2577.197620] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:55:01 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x5e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x90, 0x40, "976ae46d07d1812fd0664e95dee18314b91d"}}]}, 0x150}}, 0x0) 13:55:17 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:55:17 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x67, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xd8, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a"}}]}, 0x158}}, 0x0) 13:55:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 13:55:17 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r4, 0x0, r4) 13:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 9) 13:55:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 24) 13:55:17 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2592.929384] FAULT_INJECTION: forcing a failure. [ 2592.929384] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.930579] CPU: 1 PID: 19086 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2592.931286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.932134] Call Trace: [ 2592.932412] dump_stack+0x107/0x167 [ 2592.932789] should_fail.cold+0x5/0xa [ 2592.933184] ? create_object.isra.0+0x3a/0xa20 [ 2592.933666] should_failslab+0x5/0x20 [ 2592.934059] kmem_cache_alloc+0x5b/0x310 [ 2592.934484] create_object.isra.0+0x3a/0xa20 [ 2592.934940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2592.935469] kmem_cache_alloc+0x159/0x310 [ 2592.935903] ? __lockdep_reset_lock+0x180/0x180 [ 2592.936390] dup_fd+0x89/0xcf0 [ 2592.936730] unshare_files+0x175/0x270 [ 2592.937135] ? __ia32_sys_unshare+0x40/0x40 [ 2592.937590] ? get_user_pages_remote+0x63/0x90 [ 2592.938058] ? get_user_pages_remote+0x6c/0x90 [ 2592.938534] bprm_execve+0xcb/0x1a60 [ 2592.938921] ? acct_arg_size+0xe0/0xe0 [ 2592.939321] ? downgrade_write+0x3a0/0x3a0 [ 2592.939760] ? open_exec+0x70/0x70 [ 2592.940127] ? memcpy+0x39/0x60 [ 2592.940469] ? copy_string_kernel+0x3b6/0x450 [ 2592.940939] do_execveat_common+0x772/0x8d0 [ 2592.941394] ? bprm_execve+0x1a60/0x1a60 [ 2592.941827] __x64_sys_execveat+0xed/0x140 [ 2592.942269] do_syscall_64+0x33/0x40 [ 2592.942653] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2592.943180] RIP: 0033:0x7fac73041b19 [ 2592.943564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.945426] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2592.946199] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2592.946928] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2592.947656] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.948384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2592.949111] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2592.951905] FAULT_INJECTION: forcing a failure. [ 2592.951905] name failslab, interval 1, probability 0, space 0, times 0 [ 2592.953201] CPU: 0 PID: 19080 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2592.953967] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2592.954851] Call Trace: [ 2592.955139] dump_stack+0x107/0x167 [ 2592.955530] should_fail.cold+0x5/0xa [ 2592.955932] ? vm_area_alloc+0x1c/0x110 [ 2592.956361] should_failslab+0x5/0x20 [ 2592.956780] kmem_cache_alloc+0x5b/0x310 [ 2592.957242] vm_area_alloc+0x1c/0x110 [ 2592.957678] alloc_bprm+0x337/0x8f0 [ 2592.958100] do_execveat_common+0x275/0x8d0 [ 2592.958593] ? strncpy_from_user+0x9e/0x470 [ 2592.959077] ? bprm_execve+0x1a60/0x1a60 [ 2592.959564] __x64_sys_execveat+0xed/0x140 [ 2592.960052] do_syscall_64+0x33/0x40 [ 2592.960458] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2592.961000] RIP: 0033:0x7fde11765b19 [ 2592.961421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2592.963420] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2592.964242] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2592.965027] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2592.965824] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2592.966609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2592.967386] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:55:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x67, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xd8, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a"}}]}, 0x158}}, 0x0) [ 2592.984313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 13:55:17 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:17 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:17 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x67, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xd8, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a"}}]}, 0x158}}, 0x0) 13:55:17 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:17 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 25) 13:55:17 executing program 4: fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r1, &(0x7f0000000140)={0x0, 0x0, 0x10}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x12345}, 0x2) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100000000, 0x10050, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x90, 0x1f, 0x9, 0x0, 0x3f, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc1}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x2) r3 = socket$netlink(0x10, 0x3, 0x7) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x33, 0x0, &(0x7f0000000440)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r5, 0x29, 0x33, 0x0, &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000100000018000000b590639e4a5fa34f83c9e5883a70f07c5929bb4514eea3d0e06167ee95", @ANYRES32=r5, @ANYRES32, @ANYBLOB="eb4f1dab841896ebe98a8f4022c8f4eee8467b4f0b868f28"]) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)={0x2}, r4, 0x1, 0x0, 0x0, {0x0, r6}}, 0x2269) dup3(r3, r2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0xd8) 13:55:17 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x400440) fsetxattr$security_capability(r1, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x8000, 0x800}, {0x2, 0x2}]}, 0x14, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) [ 2593.150993] FAULT_INJECTION: forcing a failure. [ 2593.150993] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.152148] CPU: 1 PID: 19107 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2593.152847] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.153666] Call Trace: [ 2593.153943] dump_stack+0x107/0x167 [ 2593.154318] should_fail.cold+0x5/0xa [ 2593.154709] ? alloc_fdtable+0x84/0x280 [ 2593.155121] should_failslab+0x5/0x20 [ 2593.155509] kmem_cache_alloc_trace+0x55/0x320 [ 2593.155974] ? rwlock_bug.part.0+0x90/0x90 [ 2593.156410] alloc_fdtable+0x84/0x280 [ 2593.156806] dup_fd+0x74d/0xcf0 [ 2593.157156] unshare_files+0x175/0x270 [ 2593.157569] ? __ia32_sys_unshare+0x40/0x40 [ 2593.158008] ? trace_hardirqs_on+0x5b/0x180 [ 2593.158449] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2593.159003] bprm_execve+0xcb/0x1a60 [ 2593.159386] ? check_memory_region+0x198/0x1f0 [ 2593.159853] ? open_exec+0x70/0x70 [ 2593.160218] ? memcpy+0x39/0x60 [ 2593.160559] ? copy_string_kernel+0x3b6/0x450 [ 2593.161022] do_execveat_common+0x772/0x8d0 [ 2593.161483] ? bprm_execve+0x1a60/0x1a60 [ 2593.161913] __x64_sys_execveat+0xed/0x140 [ 2593.162348] do_syscall_64+0x33/0x40 [ 2593.162725] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2593.163245] RIP: 0033:0x7fac73041b19 [ 2593.163626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2593.165487] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 13:55:17 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 10) [ 2593.166255] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2593.167135] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2593.167855] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2593.168574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2593.169295] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2593.220242] FAULT_INJECTION: forcing a failure. [ 2593.220242] name failslab, interval 1, probability 0, space 0, times 0 [ 2593.221622] CPU: 0 PID: 19115 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2593.222365] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2593.223257] Call Trace: [ 2593.223555] dump_stack+0x107/0x167 [ 2593.223965] should_fail.cold+0x5/0xa [ 2593.224390] ? create_object.isra.0+0x3a/0xa20 [ 2593.224896] should_failslab+0x5/0x20 [ 2593.225330] kmem_cache_alloc+0x5b/0x310 [ 2593.225796] create_object.isra.0+0x3a/0xa20 [ 2593.226276] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2593.226811] kmem_cache_alloc+0x159/0x310 [ 2593.227268] vm_area_alloc+0x1c/0x110 [ 2593.227669] alloc_bprm+0x337/0x8f0 [ 2593.228085] do_execveat_common+0x275/0x8d0 [ 2593.228565] ? strncpy_from_user+0x9e/0x470 [ 2593.229040] ? bprm_execve+0x1a60/0x1a60 [ 2593.229510] __x64_sys_execveat+0xed/0x140 [ 2593.229969] do_syscall_64+0x33/0x40 [ 2593.230378] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2593.230933] RIP: 0033:0x7fde11765b19 [ 2593.231335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2593.233221] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2593.234066] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2593.234839] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2593.235613] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2593.236387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2593.237161] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:55:31 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x100, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c03"}}]}, 0x15c}}, 0x0) 13:55:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000001c0)=ANY=[], 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x29eb, 0x4) sendmmsg$inet6(r0, &(0x7f00000022c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000580)="aabe93e30ef9747d3e858d189cfe6d732a85bd9afbce3958ae4e4dc4d89ffb247c985e22c4966cf8afa5c403e904b40b1a26ddb7e126c8aaf98638592538ba6d5a021a3312799c1ac683ddabbff868b730bed7c457adff8397f555ded3b47860bfba20fdb2f52358852fe2c1e9d80abfe07f13112dd15a9b73b9edd0818fccd6cf9684693755cffd903f8bc8b98337c184d2c45a28ec2810eebb4750f9d9763f9d99dcb6f38fa5e65aea012d512028e8416fde5b3f8576eb915e1829676ed8fac1cb32c6254d7533800e9a2737e8550929e0674e44da993743daf64a4aef0747bac6255ae91e36f5a289b5a13e6967076a4b50b88ec2fef5f3750ecdadee030f5ca69a1cddba46400669b73ef9b29478073b431a8944d0a43fdb5e75b608bb92b5c4761b25127810a3ee8e8c624ef3312516d2ef4dd1b4850d824fcd6ad8b2c4a76ee821374be5a8bae6dd4fd1825ceed721d67de4af6aaa29e6418cde9fa30a15f9aacfbebea67d74da0a50a213121b61dab698f3b6bec4fba6df06dbea1364a0cfffd6ac86008cb82734baa4472d370c06af7db5bce33d350d2a6b627ba61e8853e94969a5eb1b4ba3e62d2a2b7d60c31ab246c4c71a144fc0a24f0bfc9885e84f4a6ef13ddc7fae29b6b6e15f058f13773dbbdc1d1522b99f3f2480a55ab65dcf7d13d3ec149b9f26f2b134608e9677e432249288fd7c0140f318e148f84a4e034605b3b2f6d22bae507aead25d546baf869b0ebce4262d72bf5858e948f23ec16d4546f827b8c8167671f6732f4ba2c51e68b1de3cc10886d15a041246381a8c8089631f1ca420e62f2bd99c813020936784dc20d7fb6d953ecd65466c06ad6a05e577582ca92fb7ffde8a4b13cd90d393a69df81754ccc19ee2f09d388eb3bffd7b2f5faf6d6abfaac90a8ff52d8b7e86e1fd7430f912f1815af25fb4873a2639c2f752d7a9c113b8e964cb32d6dd5f1741f669288211a082b9e2a28b3d1ae318653be7209f4431828c2716bc7804fb6077404bd84f399bfa3745ae36d42598e17510ab1ba6624568f8a7b866df892129a600fbfd0257e776ec8baaa02b2f549b26b3386e5767036d453809303aba2c5f868a299d883043d8b7e8c3cc1f209d75abe883ef6535c799f741adf372d2a510b220df2f6b92be61c060febaea11c7200887e8d3df4abd2710c36c1ab1836a450f4c621410192eb3dc19dcacded7baaf443f2261de6525d4377ff9bf7441f1858f2a47fc6c848e2cb5e646dec99207eeb9b91608bb435b4e0131e4cf5ea585ae4b4ce4e5bcf0ba8d14a2bd549d9c74a0be2de21debe0f04053dc4f4e8ba911a41e7161fd008f039f978907d648cf872ed6009ce79c5c1bf125cdf5bded18d17c0b1cfaac1b4624385e763a7a5d4804d20cfe40d891776d559f7e73e543dad5169731f3e951b38cb0cb744ed6ee32736a934beb1748a63d15a018090b6346e29a60edcd4dbd180a537941d18f1889049b50c466a94cb2e6fab917ee53e0975e5852c9fda6a90574eb1a9c9c6450414fb9e39f347bcf9185709621ee9531cf44ecb3908464d5203ed50958bcb668b5ca6ff8c1423440be69a99eae7731178d5d55be0124488e50257e2c21c8ecfd35af37cc8752ffc582faff23281691808fb170a097f5d7104114b55314781ce9eb250f126a698806a31fe566b124ed743004f97cde04de8a801fbda6994955fcf6aff71b779d0a2db88fe12ae29cd5671c632eccce18f1b35efbfee2c3058471ac164cac6bcb6716dbf0ed42ee6c6806dccee6cf812e3aeb82f8c748ff32fb206914970de9089cab646c751496a625b34e4ab560fd746d28e929f7f743a44725475e48d6470d6d91ef9b967a8ffe4a9314ea7cdc9c9cb6e2e7ac1e40674ec3787878d369fde4a308ee6d6d93d3037bed716bf5b9df9c37d2b60872fc41c11ac5866a6aa0ebffdcccd98d830e1389f770951451fa225eca6583972192627b9652b503093e41f18a7e55ea1dbfda143abea3456157abb7be9284e4bb6021e300a348afbaf7886bd522cd692479bf2f2aa05430345b747e79a23557fbff435d02c42ee048389e3fe243af54563da059bd97ee7c3e2262740a8fbbe444c870c066686e0b1de7e2d6d3340facfd2fc6926329f65b619990508857d0680590004209057a7c8c13b29e191adbc34ba4974ebea5320e33086fe7092cae0403fe1c6ceff53b7c20b5fce411ca44da4ec4ec009160f7c36965d0f428b3b627f90db50a5b9298e6f77a1d742e2d503d4b9cb44d919d4d8f10045de73656959e38e1e1aaf2ae60dbff41a4f6e5dd10cba88b064c2460a720cb576e38bcf5d62c07c5e0a2a2817530641561cbaa7c4c7e503980b55b2db00d55d23be89a8ff24105ba5c3e647c0e5d29008c26865017f57adc4fb714cfe735624b7ced40f560a3737d367698df6bc329f69da9be380bdff6aa7674759022849e4a5de7cd33682d8177058c56f3472548c57462398d8aba076dde0241f51adfabb4ddbae71548c4ff12a8e37c4e4f056ecb0219572c77b6ceb6b4edb63a0973f86b1790299a39986ae5eeed4ab5542929aaa67a14c1bc902ee59bf2d30c586949efceed986fc642bd11ca71723e764470d431380a03a4a46ae87a1e1037617eb678a8575fb02617854bcfaf6efbb2e49cfa0dfa929bc30ab3ce88075e40f9153bfcb5121fcf0608c3ec2f4e726bbff0f71364dccaab906da796c32a36b66bf10c01b117ae92296abfb887432dd4a6837753b7def188fc60d5d8bdd72bd5e70416089dc3f93d588af2bb9d6a7c9b3a52d54d4a58b91a83e4b286062de72df3bcbe4b55680f42cf2c7158260dc72a932bc2e03be765231e85ed5b8c404bfa38a87df47c32f4be71451b2950dfa58aa4d4d63320b3dcb57e6d3ebf41d284d07f8460e34a7bbb8c8372b61114b7b2e51a52ac97aafad3d9ee90d60a3eac843831934b8c1eb10acfa601589ea6015a421775512cc6a222a71cc37283a32d9b699ad7dd0125b990db6ba9346a2b84238bb3ee916917c2723b7472bc1c998e54a009e5ed0ce11627419fc609cf3b78fc99bd19cb38e1c7dc64aa55ccb0edc0ae692f2955c8078d8f80d28a7a5ca01ebdce9d626b2976df45fecf7506730518e17b63b688d43bed3586273442b783af868cb1e645baff83a109090115f808c2cb24bc05a94486064e8f468aa99229a8ae5c5d58d11f1700e45bc11f66f20e823b7738e9fefec8d5775865243f4999f0bd595762a9091b03830cb4ec226be065ae8dc0061f532060a83c59f1ea7435d9b1ef94a87afe8d09b3c76c7a1d2d868a47d56ab99c097e782e3c066f08dc96959fcb5e7a58c0ee583e948aae6e37a0e8f77421c22a2fe6adb76b6c1bd61b66207cea6e08a2e01a7de607923a60e857e1be2cffac59a9f9405cacd4de58ab09e444a9c933909486f5d8e3d2cdaca5c10f84540306099a267937a3a7676696215fff25ada0fe8601119034243c72f57ab1561e4d53db1481d5906b1654c0d6227314946000b095cecd89f891db03cbbee1f07fa2ece3fbcd1e52a811cced44467a2e8a14b3180e2050b2defced206dbd5f5f194d6a598337c5920ec580d7ed363c56e1fbaf3db5dcba5e73b93bfdfd21c5c6a45e6d6a47cd1440db96a6a8c0d55d00e9df955469abd97a2b210b78f0a11d06a5ac52f4d0669c4b83f4ddd2433a4db5db002d99d8f1e49c4dc2f4ca941de290d874db6ed5f3e317afdaa6d7bf1646739b48f8f64ae2c26336d8aadb17edeaf0fb6fcfeced5bd60a6a7a484b759f0ac7d97eab4304a4cd194b3daae896578e1c753c15bfaf4590c57ee42b6c53a61c529cca5533cf3c4821536719ea0ac4bcc899fc8ba1234091ecfcdd59a69d799e3c090cdfbcf3d6f31105ded2715a6577141d7a4d0c91acf50f28be9bab3e43ba7bad996d25c4c3aa83fcfdde7dda05f5e45eb36a7c1f9cb0d18569774ac18c7a2efc7cb994cf637cc36183ccf3dd0617b7ba97838378a3114186a8fbf280aca851788ba32869ca6f1e4adcac9eb082a081bdee89dada70fa69c1b6ca9ea199507964fe7e720cd04bf70da25ad0e1c575c5edc5ff2b62ae683d0272013e6485da3ce73a1ee589d976efcb9cfc11b825c5d333a2684b16ab8affbc28c21f10f09fda85a4eace79f60f9e76e49875d2ffe7e032921bb5c17dd30920ba45877f2cf75a7bf095d5ae088325502d53620d3b9d90735ef584197df4b38d6f3d34512b40a737a29f6bbca127997e363d42fe7f38cb3bb56689b634329fe5e3367d7b3ea920dd510ae2938784d8e1f56b406c4ec80f7fb4a2084b3efa4d2a6364759f3a041a92feb1f07d312ce4f6c2dc6cc572e2997b5058cd16a5f4e8d9b643a316511aac18ba481952462c09d261acc7b1629d27f3646f9ff6881d173017caf1e52bb12a95700798fa2b23d866aed7375b01f86ac6cf5802a9d16259bd8d7a47061d1c57c09c02b5081c0cdcf63d6ffe60294c7f9a55a566b39e1a51857144bce61526aeb2c9f7d2f7f026b620c7a0b3c02df74587d799ba341542929254b7dcb01fb4c3e15f2cf3a6a61921cb1485daa462bcd0ce565e6ac8911f33fff604127953af39d96c554066dce02b8b384a54223b1b3b17078e8cc793ab9113c782b2e20947114ae7f86a2d834d7ddc90ccccd5095b1f5cf311ba27244c03bd0c62bee689a064dad4e7724493604db4444d6f395c029e171d9fd5310e1e29c14f697ae663afeba55b0d4ba309b7f9c6ac289d088d65382665c6dac5475555c86d0cea0b6bdd4ac1618a3462a00b19150e94a4f6da0f0fdeffec2634aafca841ddf998c3d62ff4e7806328652695c4dc8a81584e1ed5d6ef43207a59195e9285f230f0ab087ac40b3d7e0e3122bc642e3210f43f8796e39d3ca3d243f15ae76ceb65424c11a75b43054aa58a800d4f35ed2498a126e4a188e08b8ea10fe31c93cd53ea607e9ea40bed3be8443e80eacffb08bd383f26e2dc41b76cebf1dc9c534e575b45c116a0e001d50783d6312176ac3d54b2c9e979a4659cbae8018d6e3822174cf9cc63d60ff1c8bfc2ab499d30106f6ffa841a13c3cf5900ef3947eebcf2799e9a79043a40b7895c7758a89d5fff9168f91e2eeba10ce4c37fd6a99cddfc2aa3dcb1ae438931485a614a20374a33ae7938d37b5cfe6369d5735ced357d7a8434dffbf5a10d90f06957618ef26b1e4abe0ba56fab443f4d7ace5a0e6f7a202d98a968caed91375d72c0862330f331b9e152482f6e297add74964e3aec7bf823f620f0b12c54a4d49dfd66cac0964423c043457b6e2a9c07f377edd9cbdcb0342ab6be7da53e8a9593abaeecd95a02ccb313adfd38f9b053ee865e8f065c14b8eed35eeed9acd314ae5c12a8fc63f40118893c079d7879bc0a1dc569c3752d88ee73668ccad8d159436002235983befdbbaeb59d322c6e5c9151e1df48933523e9c2a9bef3801910c0ddcf64d22606469bdab6b51b41ce4450ef22eabc64e1b27471413078d29a771247cd53862daac9ffac37d00a369beb707eae4ddd43adf29502d9385531e6d6ae68d3aaa27acbe9bd90e19a0cbfad662278758a5042d4983022ba911507528bf1838553d51ca3be35260fa1f153581122ba16dbec9eff1cc44d2f93f1d0b3af3f14a26850fb109d1ad12fff902c41cb0847fa0f0c9d90dce796733962ee8ec56d1a0db1b6555e0883498c956ce95e05eead0a4172cb8af278bb8e72087677be841142c2be386d09f8756a428c154fa557a0b6fa15e8c9364e2930984ba3", 0x1000}, {&(0x7f0000000140)="8a2b149eb09ac62a14580814ab6460fb53431eb627d6a85d3a4c59a81f6856a0cfd2ccaf449cf35b28e88c9a353785fcb1b96bb8217e628c5df157951d16d6c72720446068a135", 0x47}, {&(0x7f00000001c0)="bad4de6f545f13d53b8ca944f6c2cc100ddffbff5aad1bc74b7eedb31cec191cedfc258be6c5e7b0c26694f36a8437951cdac34809dd7a2012ea4fd43c924f51a63321eb150ac72d2231d146469ae7d4532b229bb2736dda4d2620", 0x5b}], 0x3, &(0x7f00000000c0)=[@dstopts={{0x40, 0x29, 0x37, {0x8, 0x4, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1f, 0x81, [0x100000000]}}]}}}], 0x40}}, {{&(0x7f0000000240)={0xa, 0x4e20, 0x1bd, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c, &(0x7f00000018c0)=[{&(0x7f0000000280)="44c1ebfd9c8353ec55d24b2f3eb65c6429e827969630eaeda3be6a7790590b8a7993a59ec3e7aab6963463f6f14ee5c57de892fd479f40f70ca9401d78b9f389bb0b378453587257dcff5fd829c3fc8ac6b916c2386d49e6e20e59b6cfac2396ebc8648ecf0fd920f48c90e4", 0x6c}, {&(0x7f0000000300)="8fa9cbca2693a637b2b561362fbf4aa600a57869423a4d5890ac8ffb10dfb3119cde95d70f6d15364bc4954b83e86ddb8e443aecb05da90899f9ff64dc77cb0248aed37fc979cd98fd5dd81bb450db9b46f3d1b7de8ac60e0b3022bab891d312e17b2ed01fbe782be7f2f646a552b0b43cd55eb0d38fba863f2399f4262f4fc21971a21e1b26d02d2c8c191bfe99cf95b91cc18d04cd7eb6698bdb4fbdd934c049ba7454dccd4f339301f73b9b2a4e53763558e8b8c3d7fcf3359dcd76142035f220edcd088d51ac18d0a3e61a4b4f57680e097dffe7a6a42fa416eab2e903ac6c454a7d40fbcb17f7681fc21d1196cc", 0xf0}, {&(0x7f0000000400)="fca2d78713a08698086f9e98e271c01c61af31922e21ab1fa02f9554541aa402d3dfd1f7063306f980ed5695f2043af2", 0x30}, {&(0x7f0000000440)="a2a4f9607e5baa547ba66cc4c7227245a49a32fd7d0004a467d067eb359182ce7480cfc01943c44419016685098d54a8e822f8113214a75e95d25e1303df97da8921bb27f86d38a644effefb971bcd44495ff0cfa2b8ad39451a38746a7a8a97d8c4", 0x62}, {&(0x7f00000004c0)="abde76038b5468c249523c12e638f4ba3c4ccfe01630a0f015b82769302ad6662876de26ad15e18300e63106d9552f03d02066a992d08cfb29f5d8e0821f5d0b8a48a0fd", 0x44}, {&(0x7f0000001580)="270c4caac95a40dff92013f1ce4509542183a3a32d7769a476501f566e70f12d304719c44eb76ccab44e00d46dfaf6dd28c792d3c175b75ef10f99c8a9225c0565ba2497dc49c4560e15917e7b19d10236001b7e12ee12dc4616f9a64a1fae107277256ad4fa81f8c057846d51066d26db895adf8e8b7c405733d0b0c7fdbb", 0x7f}, {&(0x7f0000001600)="6192a895745b51fefd5235a8aa32503020fae09bd8594861d3f2049577d67d4619e5331acd4a22084decb7e0cd94d3a788e37a9523851b25a11b14d45e73601bd7349f71bd631e2123aa794c3a27e88bc220d50f43110f6e8c276b26090258cf9f7f3574614c901fba49f0082943b2a2bf5f5ceecb4c76a822d01ae6682e3ccfb9b05f1fa6b85232ba976316e0c09e42331dd8f5e759faf7b9e3878762cbe22650215a960345f3342a5416b72b65820c1469f7e1b8640550794e28e4304ec5e08a6acfb5", 0xc4}, {&(0x7f0000001700)="6824bafd9c434ad26e487643f41a673c2961e0d5e427da8036e7c122419328c7f900fc53b664f88db372f081", 0x2c}, {&(0x7f0000001740)="bade691b3a46079d227e61e2f32f121549c6d2689339bed791fff5f4c0c94093fc809351a64f4dad062f01170013a1d1d936b769e509d069a88fa8bc8a2c7b4ca6cc5dc99323a594b745ed2d7ead92a1861fc908eb7cc09404e3e94cb46e32d7a7e3663cabdfd144b43c34aa42cd217625b6cc21f9c93a0ce1f0aa29a1f19c59bac9c5fe38ef04c05f7fe708be4dbd6d0524e268ea535ad2a9c6669174c3d9ea", 0xa0}, {&(0x7f0000001800)="bd23b77fa209f07e450311eaa19546c799f9b72852e09b4eb952846c6a6e691250022b99af66683e1b424d11bc3525b623e1f8702c78bbb96aecef12b5df7508222a1b1b6a571f1911d184d314874f1a2f26de39495e23da15398ce50978e74f6e6d44e49540a778c0a8ee9617efbbb2d71630233064b4522257aa8e0325e28e7c8bef3e2492b696d13d841f4fa88dff0f6b785284ad21ad130612f0e8e8d3dd0289941a43e0cef97d", 0xa9}], 0xa, &(0x7f0000001980)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x2e, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @ra={0x5, 0x2, 0x1}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x33, 0x8, 0x2, 0x1f, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x62, 0x4, 0x1, 0x0, 0x0, [@mcast2, @mcast1]}}}, @hopopts_2292={{0xb8, 0x29, 0x36, {0x3a, 0x14, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x1, 0x800, [0x66272f8c, 0x2, 0x5, 0x8, 0x400, 0x9, 0x0, 0x5]}}, @pad1, @enc_lim={0x4, 0x1, 0xdb}, @enc_lim={0x4, 0x1, 0x1}, @ra={0x5, 0x2, 0x278}, @ra, @pad1, @enc_lim={0x4, 0x1, 0x1f}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x6, 0x34, "ab3cd2d93da33c652698aa66a254116fa260539c686809dabb467fe911ef1f22d701ffbb6b4a9d8c18ce391092da2cdac658eb5c"}]}}}, @hopopts={{0xd8, 0x29, 0x36, {0xb4, 0x17, '\x00', [@pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x8}, @generic={0xfa, 0xab, "df190d4575f5d89d6c007ff419abca1037b0a7bf62cac47f3e104e5a365a22bbc50469f7dcea3203185176ed3827e7ed00a08f638edb87db4846fab75f09bebbe18cbfd149a0849b3b1d5514e1102f8359f85caf2b73fddecb9fd6cdaf733509cfdb72c38702dba193a56376532077bd48b0dd4368fcfa0f9b70cda8bc74cb0d8ac74f27ebf35deccecb392e86e8c77b9fab47c0e024641bd07361c3dfdc637e0b9591573023b8ade5ab2b"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6d15}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x3b, 0x8, 0x1, 0x69, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private0]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x80}}], 0x2e0}}, {{&(0x7f0000001c80)={0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000002240)=[{&(0x7f0000001cc0)="83cd4f6f13676ae0319a9acce45ba51909022152a24bc33ace361a3f234a5208e811f4a72098ba7a716453037862553cb6b139ff8af34a18d0d6d47d91ec22f6cbbc1740786d6b2efa5f0cc66ea249eb06b94d43d1cddcfe1958b0c7edb6d2200d37311567aed73db9de74110ea9dd14fd1669dc77bc6f47e1954259affad99cb2619646aaec2bb08a6f927dcc06f1773454b62e9ccb68bba00d45eb3e", 0x9d}, {&(0x7f0000001e00)="2009516e66c611045b8a9271b4608e0221dcb1bb7f268726ea6a9683079a2e135ffe0ad142964b89163069f6534c69010a9936977b7961573b81e0b8f19534fbd76d2810e3e39eb84f9f783de0a6d284eee51b6c9df3b63d6878b3df35f11e5d484c603bc856582f14e056db967dd51e03252160dfb6c7bd7c9903a4a79fa224021af140747a4dc3f53981b7cc3c188c197bec2181e6f0a6d6ea6ec2d86cf5a80f71461bcfdf8c85d0b1bfa3ad4bdaaf9ec20fd6bbc187160d136c523c637be7580638415c7c97ed36ca006f2ab77a525f1d868c4bc2d09303bd476ceef9dbe12c4f8c56149fa45c488224", 0xeb}, {&(0x7f0000001f00)="82b5e5f95c4da6b4abe692162f64c76d8b8cb352aacb0facfbeb149869f517b2fa08b6bfe01e1ddafc1ad436fd56f8b63c3095c63f270fa09d456f9b48d9eb03953dafd0cbb28db7625914dd7f90e246a955cfd6d3641d6341dcf6e7c8a09815fa50cb4aceecf0c0461dc3e431cf6e035f7f699911ecaca0e510b17d4c8d0b8fd0f9e7fe0bc8d4816eff6f", 0x8b}, {&(0x7f0000001fc0)="1a283c1d2fd20691b49c6ae4463eb98e8f7acb141ca7e44b4c856404a126aeee7f7470521d4926d91fe1805d19827da8578b98d1590505f0372c1a2f396fe216e122e85e7ced31233e25", 0x4a}, {&(0x7f0000002040)="a8e050aee17c84e97959da8d20b76624500924b97cbf636353c5a624053c42f756c1c0ce44359293654e16495fb775321cffb6920a814d71fc39d4bb11e3a5459fdd9d061058914600957b98ecab1544c56057abead30740e8d448cdf417b5f949480bffd6cb3a46fea2b7e47ee77fdab2f4f7d3c59f479f4616769fb868ecc8a65b4b96d3bedeaa86047030851fe1ea3cd3079dc3011a5a1db835b302c5a1a75656e530fd05805c1a55901234c7d07b47", 0xb1}, {&(0x7f0000002100)="39a330f8f1d04e5f1f0b852fd94e8397832947b66669810b16f3a66626f6aa24c475a28145b8c82e", 0x28}, {&(0x7f0000002140)="a41a648e9451f85f3739b5c3ccd51ee9d6cd61b29975e8e01eba41ce468f5b2e10904b7994b641ec839e4e11d906e31e52b44c87f050067f9edbbacd55dae3ada0a508d560d208d9de5075478d15ab132c6618992cc4ec4503d9811df5d6e58726f1c0ad016dba1f0f81d3f5964227f1b9b2f1190181f8b0987f42f1f82fd9e1df44348a0e263c3225c674200a9e871a7341b53704dbb8f789d254b75689da3001ff58dd83557b8440fc94bc2a4b9ffb03f80b", 0xb3}, {&(0x7f0000002200)="6071305451141d2b70347a5432eaba97ccb7da3a3bd50faf1d99d8a4ad4e9c6d2d9b", 0x22}], 0x8}}], 0x3, 0x1169ab426ae2315d) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00), 0x2f, 0x20040000) 13:55:31 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 11) 13:55:31 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:31 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 26) 13:55:31 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x3, 0x8000008000) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x21) 13:55:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) socket$netlink(0x10, 0x3, 0x0) [ 2607.246073] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2607.267685] FAULT_INJECTION: forcing a failure. [ 2607.267685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2607.268748] CPU: 0 PID: 19130 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2607.269496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.270242] Call Trace: [ 2607.270532] dump_stack+0x107/0x167 [ 2607.270891] should_fail.cold+0x5/0xa [ 2607.271306] __alloc_pages_nodemask+0x182/0x600 [ 2607.271747] ? __lockdep_reset_lock+0x180/0x180 [ 2607.272271] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2607.272809] ? fault_dirty_shared_page+0x3f0/0x3f0 [ 2607.273359] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2607.273836] alloc_pages_current+0x187/0x280 [ 2607.274204] get_zeroed_page+0x14/0xb0 [ 2607.274553] __pud_alloc+0x33/0x270 [ 2607.274887] handle_mm_fault+0x1a73/0x3500 [ 2607.275274] ? perf_trace_lock+0x2bd/0x490 [ 2607.275657] ? SOFTIRQ_verbose+0x10/0x10 [ 2607.276028] ? __pmd_alloc+0x5e0/0x5e0 [ 2607.276417] __get_user_pages+0x61b/0x1380 [ 2607.276776] ? follow_page_mask+0x1900/0x1900 [ 2607.277183] ? __lockdep_reset_lock+0x180/0x180 [ 2607.277613] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2607.278053] __get_user_pages_remote+0x1d5/0x870 [ 2607.278494] ? lock_downgrade+0x6d0/0x6d0 [ 2607.278881] get_user_pages_remote+0x63/0x90 [ 2607.279287] get_arg_page+0xba/0x200 [ 2607.279630] ? acct_arg_size+0xe0/0xe0 [ 2607.279981] ? downgrade_write+0x3a0/0x3a0 [ 2607.280372] ? count.constprop.0+0x1b3/0x290 [ 2607.280779] copy_string_kernel+0x1b4/0x450 [ 2607.281188] do_execveat_common+0x525/0x8d0 [ 2607.281600] ? bprm_execve+0x1a60/0x1a60 [ 2607.281995] __x64_sys_execveat+0xed/0x140 [ 2607.282398] do_syscall_64+0x33/0x40 [ 2607.282737] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2607.283205] RIP: 0033:0x7fde11765b19 [ 2607.283552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.285212] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2607.285910] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2607.286559] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2607.287212] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.287856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.288505] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2607.302869] FAULT_INJECTION: forcing a failure. [ 2607.302869] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.303906] CPU: 0 PID: 19135 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2607.304657] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.305338] Call Trace: [ 2607.305633] dump_stack+0x107/0x167 [ 2607.305965] should_fail.cold+0x5/0xa [ 2607.306379] ? create_object.isra.0+0x3a/0xa20 [ 2607.306788] should_failslab+0x5/0x20 [ 2607.307203] kmem_cache_alloc+0x5b/0x310 [ 2607.307575] create_object.isra.0+0x3a/0xa20 [ 2607.308048] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2607.308508] kmem_cache_alloc_trace+0x151/0x320 [ 2607.309007] ? rwlock_bug.part.0+0x90/0x90 [ 2607.309467] alloc_fdtable+0x84/0x280 [ 2607.310027] dup_fd+0x74d/0xcf0 [ 2607.310323] unshare_files+0x175/0x270 [ 2607.310740] ? __ia32_sys_unshare+0x40/0x40 [ 2607.311127] ? get_user_pages_remote+0x63/0x90 [ 2607.311618] ? get_user_pages_remote+0x6c/0x90 [ 2607.312028] bprm_execve+0xcb/0x1a60 [ 2607.312439] ? acct_arg_size+0xe0/0xe0 [ 2607.312780] ? downgrade_write+0x3a0/0x3a0 [ 2607.313239] ? open_exec+0x70/0x70 [ 2607.313566] ? memcpy+0x39/0x60 [ 2607.313927] ? copy_string_kernel+0x3b6/0x450 [ 2607.314338] do_execveat_common+0x772/0x8d0 [ 2607.314817] ? bprm_execve+0x1a60/0x1a60 [ 2607.315201] __x64_sys_execveat+0xed/0x140 [ 2607.315665] do_syscall_64+0x33/0x40 [ 2607.315999] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2607.316542] RIP: 0033:0x7fac73041b19 [ 2607.316868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.318803] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2607.319469] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2607.320235] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2607.320990] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.321615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.322378] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:55:31 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @mcast2, 0x8}, 0x1c) [ 2607.372470] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 13:55:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 12) 13:55:32 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x100, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c03"}}]}, 0x15c}}, 0x0) 13:55:32 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 27) 13:55:32 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x10001, 0x14002) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f00000000c0)) fallocate(r0, 0x3, 0x3, 0x8000008000) [ 2607.440111] FAULT_INJECTION: forcing a failure. [ 2607.440111] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2607.441227] CPU: 0 PID: 19146 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2607.441873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.442648] Call Trace: [ 2607.442906] dump_stack+0x107/0x167 [ 2607.443259] should_fail.cold+0x5/0xa [ 2607.443629] __alloc_pages_nodemask+0x182/0x600 [ 2607.444073] ? lock_acquire+0x197/0x470 [ 2607.444457] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2607.445031] ? lock_downgrade+0x6d0/0x6d0 [ 2607.445426] ? do_raw_spin_lock+0x121/0x260 [ 2607.445862] alloc_pages_current+0x187/0x280 [ 2607.446289] __pmd_alloc+0x37/0x5e0 [ 2607.446643] handle_mm_fault+0x1ac4/0x3500 [ 2607.447056] ? perf_trace_lock+0x2bd/0x490 [ 2607.447459] ? SOFTIRQ_verbose+0x10/0x10 [ 2607.447844] ? __pmd_alloc+0x5e0/0x5e0 [ 2607.448243] __get_user_pages+0x61b/0x1380 [ 2607.448659] ? follow_page_mask+0x1900/0x1900 [ 2607.449090] ? __lockdep_reset_lock+0x180/0x180 [ 2607.449544] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2607.450007] __get_user_pages_remote+0x1d5/0x870 [ 2607.450460] ? lock_downgrade+0x6d0/0x6d0 [ 2607.450861] get_user_pages_remote+0x63/0x90 [ 2607.451290] get_arg_page+0xba/0x200 [ 2607.451654] ? acct_arg_size+0xe0/0xe0 [ 2607.452023] ? downgrade_write+0x3a0/0x3a0 [ 2607.452433] ? count.constprop.0+0x1b3/0x290 [ 2607.452856] copy_string_kernel+0x1b4/0x450 [ 2607.453283] do_execveat_common+0x525/0x8d0 [ 2607.453709] ? bprm_execve+0x1a60/0x1a60 [ 2607.454118] __x64_sys_execveat+0xed/0x140 [ 2607.454526] do_syscall_64+0x33/0x40 [ 2607.454880] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2607.455419] RIP: 0033:0x7fde11765b19 [ 2607.455771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.457739] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2607.458445] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2607.459211] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2607.459875] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.460637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.461284] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:55:32 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2607.493761] FAULT_INJECTION: forcing a failure. [ 2607.493761] name failslab, interval 1, probability 0, space 0, times 0 [ 2607.494921] CPU: 0 PID: 19151 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2607.495553] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2607.496431] Call Trace: [ 2607.496685] dump_stack+0x107/0x167 [ 2607.497087] should_fail.cold+0x5/0xa [ 2607.497451] ? kvmalloc_node+0x119/0x170 [ 2607.497905] should_failslab+0x5/0x20 [ 2607.498272] __kmalloc_node+0x76/0x420 [ 2607.498700] kvmalloc_node+0x119/0x170 [ 2607.499069] alloc_fdtable+0xd3/0x280 [ 2607.499483] dup_fd+0x74d/0xcf0 [ 2607.499818] unshare_files+0x175/0x270 [ 2607.500237] ? __ia32_sys_unshare+0x40/0x40 [ 2607.500654] ? get_user_pages_remote+0x63/0x90 [ 2607.501141] ? get_user_pages_remote+0x6c/0x90 [ 2607.501577] bprm_execve+0xcb/0x1a60 [ 2607.501982] ? acct_arg_size+0xe0/0xe0 [ 2607.502350] ? downgrade_write+0x3a0/0x3a0 [ 2607.502809] ? open_exec+0x70/0x70 [ 2607.503142] ? memcpy+0x39/0x60 [ 2607.503502] ? copy_string_kernel+0x3b6/0x450 [ 2607.503942] do_execveat_common+0x772/0x8d0 [ 2607.504405] ? bprm_execve+0x1a60/0x1a60 [ 2607.504812] __x64_sys_execveat+0xed/0x140 [ 2607.505218] do_syscall_64+0x33/0x40 [ 2607.505596] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2607.506029] RIP: 0033:0x7fac73041b19 [ 2607.506370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2607.507885] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2607.508582] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2607.509228] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2607.509885] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2607.510531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2607.511184] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:55:32 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:55:32 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x15c, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x100, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c03"}}]}, 0x15c}}, 0x0) 13:55:32 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000001c0)="007a89ab11ee", &(0x7f0000000200)=""/199, 0x0, 0x0, 0x0, 0x0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x8) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r3, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x8) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r5, 0xc) fcntl$dupfd(r6, 0x406, r5) r7 = openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="ff0f00000000000000000000000000000800000000000000", @ANYRES32=r0, @ANYBLOB="00000000ff00"/28, @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32=r0, @ANYBLOB="00000000c600"/28, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r4, @ANYBLOB='\x00'/28, @ANYRES32=r6, @ANYBLOB="000000000100008000"/28, @ANYRES32=r7, @ANYBLOB="000075000000000f0001d4285fa361554a56696000000000864c43b0de8fe791e45653c45103a1d63b5e1a0e128fb804c105d764df6ad367274c746a9795a2d23f393ad9cde491243a45a1029dbd5ab4db03052ce49c334ce1956ea6ab351d0a24bf32506fbc00cc93c0fc0af16327be57c2d4d5fdd105ab46b7ab972f5ae8adaac9654808aeb065aaa6aaf157fbe953a720c5151b0f70ba4f6292349cccab8cf16af110ff2fe5afa4fed4", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28]) [ 2607.553070] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 13:55:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 13) 13:55:46 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "ef86d99f8a738f9bc1eff4449c1a3cf5884f6f3a4919b24912bc760428e53816c641e6f67c9079c1f2f52916d6ab84d556bf2b07cf5f319eaae3bff13cd0cfa48d2beac4ee39808a50525171151ef6be4b4ce783e807a69629cf02c5ea10825e24b541d1fafd8446f0e9800572517767fbc8fdc70156ed5ca5d726980e16fbf6a594e7dc717af0d99532c9c90dc955f715874d5cc1e98921aa2083c9b711b0f744f54b40411895e1df80af7fb964f0bb7cb641000a1322827d8a04c570c02ff85e95368f58ba59b53b9b107bd106b4aa9ebf827227374d827ae75ff40dbe9b756f5a1810b90dc2e3405b2ce9b46646ccb42d27bea4588b5baf49f767307c4c30d5cd73b6410683c73f0617e870a832c0b783be431f6b1330cf3706626df95067c7b8df83451dfa1a1581a2a4f0002a7f65f8a4f290c1d69200fa64de0a25da82bf3916586733e6eae78d52ad45ad0ea8e102b10b62b2b6b57b4a516e989b7f697762b9f3ce2e0a6b712f8536f98cea39cfa31f9b34bac2ba819b3d493169a6a002e6fb46ee1b017a3c95cb2dc61106c7f542f3b30f72fc2efb3f260511af858b0def5bb6e76e3d261faa96f3e6af4f252f7c136943187d65bf4b4d75b393183380cdd3e0a875c4a915b23575b89a76b2b9ee70ee56f69129cf991c499120ea59199437b228daf3fd8cff692059f2456ff5889fdb51add7297adb6fcd6786399b833a1d9744a38255ec269d14776497549796a4267d7eaaf2a99117c654fde549f2a03f427db2faa245b0d2fca57f17902a48b3ca67dd1c14aa57f4052e4b1bdacba2dbc7fa0267685a79f53ecefc04487aa3f9ab205d27981ab11f62bbdccafe2ebba23c7ff24e78a56f8fee89d49007b8e69d020d81771c27e833ad1b31a2b07bb59a9c2cad7cb4b0abb214f5b63ffd602eeecaa620baac5efb8607fd96b594f2df06e2ec8ffd4c814cb03b24086dd0d8f57343bd8e0467f521708103690d74da704e0d66c85f6d4e3f51c0c62afb14fb7d94d53796d169803b4b448cb3911c47a1cae16846d0265c98632a12e718ffe066f0f89bb1fc9e1d0fc921310aea896541c8e1f3e78eb6a92a5a29325841b551c43b28aa6726ffdff0ec0dd5a75df6e9ce25fde1d734e68eb90ce8cc09a783097412677aca35748aa4a5e0bb40f586ea43586cd72ac15c70d641a96b7518d008f2607f1f855d16b151e126bb1b2dda15ed593bb2a425669e3299900bed9c8282edfec2a793221dafabd1fce7d93c58bf976ae31f079b8d9eca8c23ae45b108a91fa82a5d023f7daf148abd3acf38fe37768755fe8c0aa139b0a9ccb50c3e9796a4eb6994a2457897d3ba49d7a371e43391e94172c7f975967b58690deea3dd17f90c82c82882e0098c89832a6dcbfefaf6c382f138100dff4b691255927a865e3a54d9546575cb66829e75d9977226ef3b1dd866d9d81c49b402b0d0812f190678aa0cfa714d4d02f79f0ebc4a8cc18225a5e39d6e103bb21565a4a84b5917e45abc7cf472010480aa039d09b762c11840273b426dc8c174f3c4fed301b0ea0e8a1eaa19af533c38dfa4a92fa4119b0a2589a523a2da493d4f65588b526fc470ba14d7ba5d96cef7b6f8ee8df0378f22c1307b75a23567ce82a8777cff6a67a17262d2c03b1c46e592cfba6fc9207cab84e6a22dc56b9af6a45258b93e17b2a13021a8b325252453591364a9800a6c5239e06b5be31aeae726c1441e68ab29cbd193f6c3e9e4215dca29739ab09f1e92b296393044dd328cbca17e39696a2b2ce9c16aa3abe56f08865267a80a266d66651c406951b2f71717bec37d47684a1b627fda676a40cd3db9360619def50a8a548610d459df9b8d53b86538b75e873f17fbdc796ed89077fe59f1583967a1b9af3c25c3c5995e9ce4d4158521b743280939c3ec3e0ce6d13d14f508be8a152bd76b1292a866fd669308d602715a6360464d340d49a1ba3a2a5c3b00e948599396b8f6afef432487039fc5f8357440033529aa46aa16c00b746264b8718554aaf9df39fc82988c1d263c3a30879a286e0c0406278adc1debd7cb0d73e7182da0fb6cd44cd98cc457ede91e5245028c5a51fb88fe7d01ca96b923a81d5ac06ac136b4b3fe5e7782ece9eed7b94bb9483e3adcf33b70c18c461679db4e7167a1a1b43ec0f6ad4d1f1fb2520873e6a1bd1151ceb1e3aeca49cad2609566ee2c9bdc04a4f1a261e0d748952244f4bdbb0d0497d64e39563ae82817d6e2d304b5597e039aec158a7cd7dbe110ae84d3c0c6db0d89908a3890ffe13b59aeadf747a67f45e29f9cc45a559ad3eee57738d8908ed6e36683dff668f505a1c5218e32dd880529eba31d8553cf9fce05865a002db34f12ad68b0f3c3cf8aa1a87c5af68c802b706b180f6b8ab3d0723665685b94dfc8a4f8e850bed16bc1cf6cdf4123a54ef8b227a802d4196c51305660e3ab89e7b4d32631e3a7837b50db760e89d4254e8bcc702a33e5d04c3f319fa787c261dd230975ee1ba45c15bba45ea1dac765cc25dc09b8a70ab731996e3319662409d2c35cf2e61cd2a0783217fb887e53f4f6f1bc2a95fe99b2708b167efd1218f76d6ffb67db87823da27109bdf593dc4dbf9ad007921789c6a5c9960f4b3d2fe2423f6d3d97fafa855e2e48b8b9ab40262bf84ef3e23c2fa8179ffed6f516426308fe20490add92980ed1da07c36c4262e514e7b8bf627b84bbad6bda7c7f1572f583e1a35a7baefd512891273eeefbb9ddef75d672010e8fa7a4a026ca339d1e96baee5da924f53cc8c8c67bf4ef7e876c4bda36a14f4e24647498d2dd3aa483eb9c2dbf714abc0e43c98c313fa93c3f1f9faa821574082f871a15d3ab82cad85a7735131a40f3f044afa3e9102ddc6c5bbc5d05f787a7c18251f6d4e53b023671d02c049494c4f58ffca7e21a3293c4043e97a9cb72e0298d615069418b0bae45f279baa896c92f6b933334d9be7cda2e2122fac652096e279049c208aedc1a889b8d0c7753a3d0dc1ea4e481b3dfd19681ff64eae5191937b137bb9f5b685177faaa32a1ad86fa7b783465c521b21e68adf0c2aaebb5db2e3015cfc47f7946fabb63200ff94ba39b928f3ede32d993758f70f62ed6538ade62d716fbffb4d7c76680ff0f0201f0cb01534e1e12da1d6478598b2104799010b6ad3db4cc800c5d4fb15e1598b743290539b96010172d881587d0ddf69d8cae12ce128b40d6ef8f314d13330838d8ba29c3922ea20e4b03cae34e2286cba7c1b7e508516cc2bc3500b54656b558138352bed51608e0512f23f8d40769ae3046bf5207c5c6bb7b79d864c98c73f65b7969d85ef316b05a391263a3ee8d66166e9c32dbbc9b205afe379611156baf1e2acbeeea9cd014a84065a546b3810bd46a4b52be4ba5bdb194f374e580bc85914c4eadc03af24f5f4334253f303b5ff68591f73277dd191f8e6414cc492d28574d37ed0a63a0cd38e0cbc2f53798c0f06d31a2db7b0d141bd3e2cd08f1295bb2b9261a90c13c25e0cf1559623c3fab188fcad748656176e21c84c26468b49d8861ebbe71a9f62f6521440771c0911c73f194dfb63976820cb16ab9e24c8bf3efb5403a0d0186fab4de0408bf144298e07c5b508dc6ccc1a505f2278c7217c3946f8732daf8cff32e070f365795a4d9bc871c259b10bb8bcced5ce3691ec477f2f9d3f192b00105da1b235a7a3e95a37d768e3d84e0bdef0bd26e257ee4e27eaac51285430899087c175b3d8e98bc2d327020a0d4259f0785796c6939db78779ad1112d6cf1de6ac2ef2c9d3f5861e613f39db8ee4b45a09451bdeecdd6f96bca89b9c6d0f0f4b84841b15edb1f539c50e796faf6b93fbb55d46ed83a49db699c0f1215238f5bdeab9dd346b7ed0b429363f0e2baeb298d9ddb7a47fb0fc2392691c4309d6a1880de8f0c476c4f1d8fcbb876ba83f0233d2a218565166b0b34b70581d3bde8120af79c2160e8b8a015d2518c56350cb65ec11b5e0417c2163263e1cfaa6ea0a0e9251d5e7d4991eca8d44a1dc5e6a679dc517db96e4cef4de703c1c0d685ac27e814e1752dc060bc502605c8e67cd287f1950c68378d82766d5da739216b26ef08f3d5b5bc4804b0893f61ab1bd7afca553d7ccca29343f1cfb0852ff6b7dd06f037a9714071a289a8be5a2418f233ac5ae39a54f629b34ebc5f7ccbfbac05fb9fd9a6b460dc5a3c10da67bc94826c104fb67fd7c27346ce72c61cd68097c7cde7fbbb7ab48cbb54b0d3e761d060c94c0c739f11b9c674739d8fe210b01cac3a89d1d101ba78366eb9beb888f6a87b84370f42a4d9919a7875dc03a6811d24be5c1df5e47b9caf2bfca2e8a75c4ecbfd2eded9692952111452cff86c1c177132972dd775c140566d2fc12eb91810d0168305a9dfc3e5fe2e7409bf098e6fddd6dffe96852a2edd0bc0d998a17710fc2e349a7e9a57794b54ab05673fd5e703cd3bcf9914284ccf1a57eab9f7c6e738e8950ee5fd422f60c844f9c7948513a7a3f95d4db22438381dad57cdaacb067268d2de948cdb5f351a7ca2914bb6c9f439877507f4ce34be56cc32eeba50dc69f4077148cc3345bfd9e6d5eced009d1b758d6612bd655b307301e3e7bdaaa636cf53616824b38f0432ef81e415cec13f330efca03c5111275a86902c9bfffb614dcfdb8ebfce9072a13943777e58e79c33cc78c0a17ff8e436c85c73fd9d3a5ce014318bcd1ec47818c80bb4fecbebaaaaa8ccb12021175e54a7b5bfda260841ffcf73a81f70d1038f93c0855e57832851f41312f04c12038dfa2d7f7a8c7f921a000083fb9c963a12c2c55a6b5f5f230626d0bcdf8210196126fd92bd75e29d618e562e9d2bea62017e39b964666687210db26c6247d31b089d8f178c7b2c8d83f57716bbfe138520206f18a330772e5b7db453c14c3b1c8641816a77c88950e6ce94de3e8251ab2cb4736b0f2576cc72e7dd26051437f54918488107c4af6871b20933b451a94c00248612de7487ad2706fcd2a8965619acf04aa6fd08016e9916a85097660460e4ba035c284704f701267690ef9c29cc827ca0ff0c01c5f8ebe94c508315c6c756fde533f394640844dbcfab4059da1928ecb06c845f9438b61e48dd6ae6958afbe38ac570f7d342cbd1a0746298a740bc4d4b487c06d2075f6037b7eb81e68a786afdd30197b13eef38f6e5fe984bc136b4ab6cb6ba2b5c51e4003ae53194246c301f6aaed5e714358f66cbf0de825791c3adf2d274367c0b27b6923048450290115c98a6fb59036c818bfc41eadc1e45f9b8108fb32ca662f6fb4faa3a9890c88ba8c03f5fcb578bb667a9068a516b03166e6a32f75e5e6180ccda693475003942e0dd071b6b5361ceffbb57ed8ac6fa57f131dde4e7f07f059a88ae08cb71964e82955cc6fd3af60f1e9c1fcb255b2c17a9bdac04b1f8ff736f42c3345b03b358688effa91d3a8552fc09b6de453ac939e4a2dd9acb345ba543f45fd05d0c09aad0c53a469fc846b3bf842f7c0ef0118c0f25c46c592012a65f6043f20a4979ffc5c9a163a306d3d820d837e4661d53d5ddfb703bf4915220c4c303c21064894268aa38a264d5051e96205bfd90e8cc21f0f991b717e7e3a837853cc1e111ea52490b49559c87711e39a7df424bd3fcbd91d725268e73036d058698d724eee10b532370eed633cc33b2dad1ba54fab7c51e663622fd2ce6e2e405d5f0ed53ea3ccfd2d1997f806c14ed2e223c507d9dc95a6d5834a8ef48d8e5bbba6a72aae7697095615512436d3459"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000100)=""/43, 0x2b}], 0x1) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:55:46 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "ef86d99f8a738f9bc1eff4449c1a3cf5884f6f3a4919b24912bc760428e53816c641e6f67c9079c1f2f52916d6ab84d556bf2b07cf5f319eaae3bff13cd0cfa48d2beac4ee39808a50525171151ef6be4b4ce783e807a69629cf02c5ea10825e24b541d1fafd8446f0e9800572517767fbc8fdc70156ed5ca5d726980e16fbf6a594e7dc717af0d99532c9c90dc955f715874d5cc1e98921aa2083c9b711b0f744f54b40411895e1df80af7fb964f0bb7cb641000a1322827d8a04c570c02ff85e95368f58ba59b53b9b107bd106b4aa9ebf827227374d827ae75ff40dbe9b756f5a1810b90dc2e3405b2ce9b46646ccb42d27bea4588b5baf49f767307c4c30d5cd73b6410683c73f0617e870a832c0b783be431f6b1330cf3706626df95067c7b8df83451dfa1a1581a2a4f0002a7f65f8a4f290c1d69200fa64de0a25da82bf3916586733e6eae78d52ad45ad0ea8e102b10b62b2b6b57b4a516e989b7f697762b9f3ce2e0a6b712f8536f98cea39cfa31f9b34bac2ba819b3d493169a6a002e6fb46ee1b017a3c95cb2dc61106c7f542f3b30f72fc2efb3f260511af858b0def5bb6e76e3d261faa96f3e6af4f252f7c136943187d65bf4b4d75b393183380cdd3e0a875c4a915b23575b89a76b2b9ee70ee56f69129cf991c499120ea59199437b228daf3fd8cff692059f2456ff5889fdb51add7297adb6fcd6786399b833a1d9744a38255ec269d14776497549796a4267d7eaaf2a99117c654fde549f2a03f427db2faa245b0d2fca57f17902a48b3ca67dd1c14aa57f4052e4b1bdacba2dbc7fa0267685a79f53ecefc04487aa3f9ab205d27981ab11f62bbdccafe2ebba23c7ff24e78a56f8fee89d49007b8e69d020d81771c27e833ad1b31a2b07bb59a9c2cad7cb4b0abb214f5b63ffd602eeecaa620baac5efb8607fd96b594f2df06e2ec8ffd4c814cb03b24086dd0d8f57343bd8e0467f521708103690d74da704e0d66c85f6d4e3f51c0c62afb14fb7d94d53796d169803b4b448cb3911c47a1cae16846d0265c98632a12e718ffe066f0f89bb1fc9e1d0fc921310aea896541c8e1f3e78eb6a92a5a29325841b551c43b28aa6726ffdff0ec0dd5a75df6e9ce25fde1d734e68eb90ce8cc09a783097412677aca35748aa4a5e0bb40f586ea43586cd72ac15c70d641a96b7518d008f2607f1f855d16b151e126bb1b2dda15ed593bb2a425669e3299900bed9c8282edfec2a793221dafabd1fce7d93c58bf976ae31f079b8d9eca8c23ae45b108a91fa82a5d023f7daf148abd3acf38fe37768755fe8c0aa139b0a9ccb50c3e9796a4eb6994a2457897d3ba49d7a371e43391e94172c7f975967b58690deea3dd17f90c82c82882e0098c89832a6dcbfefaf6c382f138100dff4b691255927a865e3a54d9546575cb66829e75d9977226ef3b1dd866d9d81c49b402b0d0812f190678aa0cfa714d4d02f79f0ebc4a8cc18225a5e39d6e103bb21565a4a84b5917e45abc7cf472010480aa039d09b762c11840273b426dc8c174f3c4fed301b0ea0e8a1eaa19af533c38dfa4a92fa4119b0a2589a523a2da493d4f65588b526fc470ba14d7ba5d96cef7b6f8ee8df0378f22c1307b75a23567ce82a8777cff6a67a17262d2c03b1c46e592cfba6fc9207cab84e6a22dc56b9af6a45258b93e17b2a13021a8b325252453591364a9800a6c5239e06b5be31aeae726c1441e68ab29cbd193f6c3e9e4215dca29739ab09f1e92b296393044dd328cbca17e39696a2b2ce9c16aa3abe56f08865267a80a266d66651c406951b2f71717bec37d47684a1b627fda676a40cd3db9360619def50a8a548610d459df9b8d53b86538b75e873f17fbdc796ed89077fe59f1583967a1b9af3c25c3c5995e9ce4d4158521b743280939c3ec3e0ce6d13d14f508be8a152bd76b1292a866fd669308d602715a6360464d340d49a1ba3a2a5c3b00e948599396b8f6afef432487039fc5f8357440033529aa46aa16c00b746264b8718554aaf9df39fc82988c1d263c3a30879a286e0c0406278adc1debd7cb0d73e7182da0fb6cd44cd98cc457ede91e5245028c5a51fb88fe7d01ca96b923a81d5ac06ac136b4b3fe5e7782ece9eed7b94bb9483e3adcf33b70c18c461679db4e7167a1a1b43ec0f6ad4d1f1fb2520873e6a1bd1151ceb1e3aeca49cad2609566ee2c9bdc04a4f1a261e0d748952244f4bdbb0d0497d64e39563ae82817d6e2d304b5597e039aec158a7cd7dbe110ae84d3c0c6db0d89908a3890ffe13b59aeadf747a67f45e29f9cc45a559ad3eee57738d8908ed6e36683dff668f505a1c5218e32dd880529eba31d8553cf9fce05865a002db34f12ad68b0f3c3cf8aa1a87c5af68c802b706b180f6b8ab3d0723665685b94dfc8a4f8e850bed16bc1cf6cdf4123a54ef8b227a802d4196c51305660e3ab89e7b4d32631e3a7837b50db760e89d4254e8bcc702a33e5d04c3f319fa787c261dd230975ee1ba45c15bba45ea1dac765cc25dc09b8a70ab731996e3319662409d2c35cf2e61cd2a0783217fb887e53f4f6f1bc2a95fe99b2708b167efd1218f76d6ffb67db87823da27109bdf593dc4dbf9ad007921789c6a5c9960f4b3d2fe2423f6d3d97fafa855e2e48b8b9ab40262bf84ef3e23c2fa8179ffed6f516426308fe20490add92980ed1da07c36c4262e514e7b8bf627b84bbad6bda7c7f1572f583e1a35a7baefd512891273eeefbb9ddef75d672010e8fa7a4a026ca339d1e96baee5da924f53cc8c8c67bf4ef7e876c4bda36a14f4e24647498d2dd3aa483eb9c2dbf714abc0e43c98c313fa93c3f1f9faa821574082f871a15d3ab82cad85a7735131a40f3f044afa3e9102ddc6c5bbc5d05f787a7c18251f6d4e53b023671d02c049494c4f58ffca7e21a3293c4043e97a9cb72e0298d615069418b0bae45f279baa896c92f6b933334d9be7cda2e2122fac652096e279049c208aedc1a889b8d0c7753a3d0dc1ea4e481b3dfd19681ff64eae5191937b137bb9f5b685177faaa32a1ad86fa7b783465c521b21e68adf0c2aaebb5db2e3015cfc47f7946fabb63200ff94ba39b928f3ede32d993758f70f62ed6538ade62d716fbffb4d7c76680ff0f0201f0cb01534e1e12da1d6478598b2104799010b6ad3db4cc800c5d4fb15e1598b743290539b96010172d881587d0ddf69d8cae12ce128b40d6ef8f314d13330838d8ba29c3922ea20e4b03cae34e2286cba7c1b7e508516cc2bc3500b54656b558138352bed51608e0512f23f8d40769ae3046bf5207c5c6bb7b79d864c98c73f65b7969d85ef316b05a391263a3ee8d66166e9c32dbbc9b205afe379611156baf1e2acbeeea9cd014a84065a546b3810bd46a4b52be4ba5bdb194f374e580bc85914c4eadc03af24f5f4334253f303b5ff68591f73277dd191f8e6414cc492d28574d37ed0a63a0cd38e0cbc2f53798c0f06d31a2db7b0d141bd3e2cd08f1295bb2b9261a90c13c25e0cf1559623c3fab188fcad748656176e21c84c26468b49d8861ebbe71a9f62f6521440771c0911c73f194dfb63976820cb16ab9e24c8bf3efb5403a0d0186fab4de0408bf144298e07c5b508dc6ccc1a505f2278c7217c3946f8732daf8cff32e070f365795a4d9bc871c259b10bb8bcced5ce3691ec477f2f9d3f192b00105da1b235a7a3e95a37d768e3d84e0bdef0bd26e257ee4e27eaac51285430899087c175b3d8e98bc2d327020a0d4259f0785796c6939db78779ad1112d6cf1de6ac2ef2c9d3f5861e613f39db8ee4b45a09451bdeecdd6f96bca89b9c6d0f0f4b84841b15edb1f539c50e796faf6b93fbb55d46ed83a49db699c0f1215238f5bdeab9dd346b7ed0b429363f0e2baeb298d9ddb7a47fb0fc2392691c4309d6a1880de8f0c476c4f1d8fcbb876ba83f0233d2a218565166b0b34b70581d3bde8120af79c2160e8b8a015d2518c56350cb65ec11b5e0417c2163263e1cfaa6ea0a0e9251d5e7d4991eca8d44a1dc5e6a679dc517db96e4cef4de703c1c0d685ac27e814e1752dc060bc502605c8e67cd287f1950c68378d82766d5da739216b26ef08f3d5b5bc4804b0893f61ab1bd7afca553d7ccca29343f1cfb0852ff6b7dd06f037a9714071a289a8be5a2418f233ac5ae39a54f629b34ebc5f7ccbfbac05fb9fd9a6b460dc5a3c10da67bc94826c104fb67fd7c27346ce72c61cd68097c7cde7fbbb7ab48cbb54b0d3e761d060c94c0c739f11b9c674739d8fe210b01cac3a89d1d101ba78366eb9beb888f6a87b84370f42a4d9919a7875dc03a6811d24be5c1df5e47b9caf2bfca2e8a75c4ecbfd2eded9692952111452cff86c1c177132972dd775c140566d2fc12eb91810d0168305a9dfc3e5fe2e7409bf098e6fddd6dffe96852a2edd0bc0d998a17710fc2e349a7e9a57794b54ab05673fd5e703cd3bcf9914284ccf1a57eab9f7c6e738e8950ee5fd422f60c844f9c7948513a7a3f95d4db22438381dad57cdaacb067268d2de948cdb5f351a7ca2914bb6c9f439877507f4ce34be56cc32eeba50dc69f4077148cc3345bfd9e6d5eced009d1b758d6612bd655b307301e3e7bdaaa636cf53616824b38f0432ef81e415cec13f330efca03c5111275a86902c9bfffb614dcfdb8ebfce9072a13943777e58e79c33cc78c0a17ff8e436c85c73fd9d3a5ce014318bcd1ec47818c80bb4fecbebaaaaa8ccb12021175e54a7b5bfda260841ffcf73a81f70d1038f93c0855e57832851f41312f04c12038dfa2d7f7a8c7f921a000083fb9c963a12c2c55a6b5f5f230626d0bcdf8210196126fd92bd75e29d618e562e9d2bea62017e39b964666687210db26c6247d31b089d8f178c7b2c8d83f57716bbfe138520206f18a330772e5b7db453c14c3b1c8641816a77c88950e6ce94de3e8251ab2cb4736b0f2576cc72e7dd26051437f54918488107c4af6871b20933b451a94c00248612de7487ad2706fcd2a8965619acf04aa6fd08016e9916a85097660460e4ba035c284704f701267690ef9c29cc827ca0ff0c01c5f8ebe94c508315c6c756fde533f394640844dbcfab4059da1928ecb06c845f9438b61e48dd6ae6958afbe38ac570f7d342cbd1a0746298a740bc4d4b487c06d2075f6037b7eb81e68a786afdd30197b13eef38f6e5fe984bc136b4ab6cb6ba2b5c51e4003ae53194246c301f6aaed5e714358f66cbf0de825791c3adf2d274367c0b27b6923048450290115c98a6fb59036c818bfc41eadc1e45f9b8108fb32ca662f6fb4faa3a9890c88ba8c03f5fcb578bb667a9068a516b03166e6a32f75e5e6180ccda693475003942e0dd071b6b5361ceffbb57ed8ac6fa57f131dde4e7f07f059a88ae08cb71964e82955cc6fd3af60f1e9c1fcb255b2c17a9bdac04b1f8ff736f42c3345b03b358688effa91d3a8552fc09b6de453ac939e4a2dd9acb345ba543f45fd05d0c09aad0c53a469fc846b3bf842f7c0ef0118c0f25c46c592012a65f6043f20a4979ffc5c9a163a306d3d820d837e4661d53d5ddfb703bf4915220c4c303c21064894268aa38a264d5051e96205bfd90e8cc21f0f991b717e7e3a837853cc1e111ea52490b49559c87711e39a7df424bd3fcbd91d725268e73036d058698d724eee10b532370eed633cc33b2dad1ba54fab7c51e663622fd2ce6e2e405d5f0ed53ea3ccfd2d1997f806c14ed2e223c507d9dc95a6d5834a8ef48d8e5bbba6a72aae7697095615512436d3459"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:55:46 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:46 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 28) 13:55:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x110, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000"}}]}, 0x160}}, 0x0) 13:55:46 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) [ 2622.030381] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2622.040837] FAULT_INJECTION: forcing a failure. [ 2622.040837] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.042181] CPU: 0 PID: 19176 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2622.042975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.043868] Call Trace: [ 2622.044192] dump_stack+0x107/0x167 [ 2622.044633] should_fail.cold+0x5/0xa [ 2622.045028] ? __pmd_alloc+0x94/0x5e0 [ 2622.045451] should_failslab+0x5/0x20 [ 2622.045828] kmem_cache_alloc+0x5b/0x310 [ 2622.046293] __pmd_alloc+0x94/0x5e0 [ 2622.046653] handle_mm_fault+0x1ac4/0x3500 [ 2622.047132] ? perf_trace_lock+0x2bd/0x490 [ 2622.047607] ? SOFTIRQ_verbose+0x10/0x10 [ 2622.048065] ? __pmd_alloc+0x5e0/0x5e0 [ 2622.048526] __get_user_pages+0x61b/0x1380 [ 2622.049007] ? follow_page_mask+0x1900/0x1900 [ 2622.049511] ? __lockdep_reset_lock+0x180/0x180 [ 2622.050042] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2622.050575] __get_user_pages_remote+0x1d5/0x870 [ 2622.051102] ? lock_downgrade+0x6d0/0x6d0 [ 2622.051564] get_user_pages_remote+0x63/0x90 [ 2622.052023] get_arg_page+0xba/0x200 [ 2622.052440] ? acct_arg_size+0xe0/0xe0 [ 2622.052833] ? downgrade_write+0x3a0/0x3a0 [ 2622.053309] ? count.constprop.0+0x1b3/0x290 [ 2622.053765] copy_string_kernel+0x1b4/0x450 [ 2622.054259] do_execveat_common+0x525/0x8d0 [ 2622.054704] ? bprm_execve+0x1a60/0x1a60 [ 2622.055180] __x64_sys_execveat+0xed/0x140 [ 2622.055624] do_syscall_64+0x33/0x40 [ 2622.056037] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2622.056546] RIP: 0033:0x7fde11765b19 [ 2622.056958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.058684] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2622.059526] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2622.060237] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2622.061021] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2622.061714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2622.062494] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2622.069690] FAULT_INJECTION: forcing a failure. [ 2622.069690] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.070861] CPU: 0 PID: 19183 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2622.071438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.072297] Call Trace: [ 2622.072536] dump_stack+0x107/0x167 [ 2622.072865] should_fail.cold+0x5/0xa [ 2622.073272] ? create_object.isra.0+0x3a/0xa20 [ 2622.073698] should_failslab+0x5/0x20 [ 2622.073908] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2622.074033] kmem_cache_alloc+0x5b/0x310 [ 2622.074053] create_object.isra.0+0x3a/0xa20 [ 2622.074065] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2622.074085] __kmalloc_node+0x1ae/0x420 [ 2622.076959] kvmalloc_node+0x119/0x170 [ 2622.077311] alloc_fdtable+0xd3/0x280 [ 2622.077656] dup_fd+0x74d/0xcf0 [ 2622.077986] unshare_files+0x175/0x270 [ 2622.078337] ? __ia32_sys_unshare+0x40/0x40 [ 2622.078730] ? get_user_pages_remote+0x63/0x90 [ 2622.079141] ? get_user_pages_remote+0x6c/0x90 [ 2622.079551] bprm_execve+0xcb/0x1a60 [ 2622.079892] ? acct_arg_size+0xe0/0xe0 [ 2622.080244] ? downgrade_write+0x3a0/0x3a0 [ 2622.080625] ? open_exec+0x70/0x70 [ 2622.080947] ? memcpy+0x39/0x60 [ 2622.081254] ? copy_string_kernel+0x3b6/0x450 [ 2622.081681] do_execveat_common+0x772/0x8d0 [ 2622.082076] ? bprm_execve+0x1a60/0x1a60 [ 2622.082457] __x64_sys_execveat+0xed/0x140 [ 2622.082843] do_syscall_64+0x33/0x40 [ 2622.083176] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2622.083630] RIP: 0033:0x7fac73041b19 [ 2622.083967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.085576] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2622.086272] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2622.086901] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2622.087537] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2622.088174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2622.088805] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:55:46 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x110, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000"}}]}, 0x160}}, 0x0) 13:55:46 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:46 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:55:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6e, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x110, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000"}}]}, 0x160}}, 0x0) 13:55:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 14) [ 2622.265114] FAULT_INJECTION: forcing a failure. [ 2622.265114] name failslab, interval 1, probability 0, space 0, times 0 [ 2622.266214] CPU: 0 PID: 19198 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2622.266832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2622.267575] Call Trace: [ 2622.267936] dump_stack+0x107/0x167 [ 2622.268266] should_fail.cold+0x5/0xa [ 2622.268610] ? create_object.isra.0+0x3a/0xa20 [ 2622.269023] should_failslab+0x5/0x20 [ 2622.269360] kmem_cache_alloc+0x5b/0x310 [ 2622.269753] create_object.isra.0+0x3a/0xa20 [ 2622.270145] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2622.270598] kmem_cache_alloc+0x159/0x310 [ 2622.270972] __pmd_alloc+0x94/0x5e0 [ 2622.271295] handle_mm_fault+0x1ac4/0x3500 [ 2622.271678] ? perf_trace_lock+0x2bd/0x490 [ 2622.272056] ? SOFTIRQ_verbose+0x10/0x10 [ 2622.272407] ? __pmd_alloc+0x5e0/0x5e0 [ 2622.272788] __get_user_pages+0x61b/0x1380 [ 2622.273175] ? follow_page_mask+0x1900/0x1900 [ 2622.273570] ? __lockdep_reset_lock+0x180/0x180 [ 2622.273994] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2622.274428] __get_user_pages_remote+0x1d5/0x870 [ 2622.274853] ? lock_downgrade+0x6d0/0x6d0 [ 2622.275231] get_user_pages_remote+0x63/0x90 [ 2622.275627] get_arg_page+0xba/0x200 [ 2622.275965] ? acct_arg_size+0xe0/0xe0 [ 2622.276303] ? downgrade_write+0x3a0/0x3a0 [ 2622.276679] ? count.constprop.0+0x1b3/0x290 [ 2622.277068] copy_string_kernel+0x1b4/0x450 [ 2622.277466] do_execveat_common+0x525/0x8d0 [ 2622.277867] ? bprm_execve+0x1a60/0x1a60 [ 2622.278250] __x64_sys_execveat+0xed/0x140 [ 2622.278645] do_syscall_64+0x33/0x40 [ 2622.278985] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2622.279439] RIP: 0033:0x7fde11765b19 [ 2622.279831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2622.281529] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2622.282360] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2622.283136] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2622.283906] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2622.284688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2622.285472] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:56:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 15) 13:56:01 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fcntl$notify(r0, 0x402, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000000c0)) fallocate(r1, 0x3, 0x80000000004, 0x8) [ 2637.283750] FAULT_INJECTION: forcing a failure. [ 2637.283750] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.284726] CPU: 1 PID: 19211 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2637.285294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2637.285973] Call Trace: [ 2637.286198] dump_stack+0x107/0x167 [ 2637.286502] should_fail.cold+0x5/0xa [ 2637.286820] ? kvmalloc_node+0x119/0x170 [ 2637.287159] should_failslab+0x5/0x20 [ 2637.287473] __kmalloc_node+0x76/0x420 [ 2637.287795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2637.288219] kvmalloc_node+0x119/0x170 [ 2637.288544] alloc_fdtable+0x13f/0x280 [ 2637.288878] dup_fd+0x74d/0xcf0 [ 2637.289161] unshare_files+0x175/0x270 [ 2637.289476] ? __ia32_sys_unshare+0x40/0x40 [ 2637.289839] ? get_user_pages_remote+0x63/0x90 [ 2637.290219] ? get_user_pages_remote+0x6c/0x90 [ 2637.290598] bprm_execve+0xcb/0x1a60 [ 2637.290906] ? acct_arg_size+0xe0/0xe0 [ 2637.291229] ? downgrade_write+0x3a0/0x3a0 [ 2637.291575] ? open_exec+0x70/0x70 [ 2637.291872] ? memcpy+0x39/0x60 [ 2637.292147] ? copy_string_kernel+0x3b6/0x450 [ 2637.292521] do_execveat_common+0x772/0x8d0 [ 2637.292877] ? bprm_execve+0x1a60/0x1a60 [ 2637.293228] __x64_sys_execveat+0xed/0x140 [ 2637.293579] do_syscall_64+0x33/0x40 [ 2637.293895] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2637.294316] RIP: 0033:0x7fac73041b19 [ 2637.294621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2637.296113] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2637.296740] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2637.297324] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2637.297917] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.298512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2637.299083] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2637.305809] FAULT_INJECTION: forcing a failure. [ 2637.305809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2637.307007] CPU: 0 PID: 19205 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2637.307618] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2637.308350] Call Trace: [ 2637.308592] dump_stack+0x107/0x167 [ 2637.308925] should_fail.cold+0x5/0xa [ 2637.309277] __alloc_pages_nodemask+0x182/0x600 [ 2637.309699] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2637.310244] ? find_held_lock+0x2c/0x110 [ 2637.310616] ? __pmd_alloc+0x2db/0x5e0 [ 2637.310964] ? lock_downgrade+0x6d0/0x6d0 [ 2637.311332] ? do_raw_spin_lock+0x121/0x260 [ 2637.311729] alloc_pages_current+0x187/0x280 [ 2637.312121] pte_alloc_one+0x16/0x1a0 [ 2637.312465] __pte_alloc+0x1d/0x330 [ 2637.312788] handle_mm_fault+0x287f/0x3500 [ 2637.313169] ? perf_trace_lock+0x2bd/0x490 [ 2637.313534] ? SOFTIRQ_verbose+0x10/0x10 [ 2637.313905] ? __pmd_alloc+0x5e0/0x5e0 [ 2637.314295] __get_user_pages+0x61b/0x1380 [ 2637.314690] ? follow_page_mask+0x1900/0x1900 [ 2637.315080] ? __lockdep_reset_lock+0x180/0x180 [ 2637.315494] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2637.315912] __get_user_pages_remote+0x1d5/0x870 [ 2637.316338] ? lock_downgrade+0x6d0/0x6d0 [ 2637.316735] get_user_pages_remote+0x63/0x90 [ 2637.317172] get_arg_page+0xba/0x200 [ 2637.317503] ? acct_arg_size+0xe0/0xe0 [ 2637.317866] ? downgrade_write+0x3a0/0x3a0 [ 2637.318245] ? count.constprop.0+0x1b3/0x290 [ 2637.318641] copy_string_kernel+0x1b4/0x450 [ 2637.319034] do_execveat_common+0x525/0x8d0 [ 2637.319424] ? bprm_execve+0x1a60/0x1a60 [ 2637.319799] __x64_sys_execveat+0xed/0x140 [ 2637.320189] do_syscall_64+0x33/0x40 [ 2637.320514] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2637.320973] RIP: 0033:0x7fde11765b19 [ 2637.321298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2637.322939] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2637.323599] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2637.324241] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2637.324894] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.325515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2637.326155] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2637.332872] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 13:56:01 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:01 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:01 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:01 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 29) 13:56:01 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6f, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x118, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c03000000"}}]}, 0x160}}, 0x0) 13:56:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6f, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x118, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c03000000"}}]}, 0x160}}, 0x0) 13:56:01 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:01 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:01 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x6f, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x118, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c03000000"}}]}, 0x160}}, 0x0) 13:56:01 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:02 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:02 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) r1 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = gettid() kcmp(0x0, r2, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r1, r2, 0x18) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1f, 0x8, 0x1f, 0x7f, 0x0, 0x3, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xa1be, 0x1, @perf_config_ext={0xfffffffffffffffb, 0x3}, 0x1100, 0xffffffff, 0x10001, 0x7, 0x5f, 0x7bf, 0x0, 0x0, 0x303, 0x0, 0x400}, r1, 0x10, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:56:02 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 30) [ 2637.485866] FAULT_INJECTION: forcing a failure. [ 2637.485866] name failslab, interval 1, probability 0, space 0, times 0 [ 2637.486904] CPU: 0 PID: 19233 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2637.487511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2637.488277] Call Trace: [ 2637.488514] dump_stack+0x107/0x167 [ 2637.488840] should_fail.cold+0x5/0xa [ 2637.489181] ? create_object.isra.0+0x3a/0xa20 [ 2637.489581] should_failslab+0x5/0x20 [ 2637.489926] kmem_cache_alloc+0x5b/0x310 [ 2637.490290] create_object.isra.0+0x3a/0xa20 [ 2637.490668] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2637.491144] __kmalloc_node+0x1ae/0x420 [ 2637.491508] kvmalloc_node+0x119/0x170 [ 2637.491857] alloc_fdtable+0x13f/0x280 [ 2637.492208] dup_fd+0x74d/0xcf0 [ 2637.492513] unshare_files+0x175/0x270 [ 2637.492852] ? __ia32_sys_unshare+0x40/0x40 [ 2637.493228] ? get_user_pages_remote+0x63/0x90 [ 2637.493618] ? get_user_pages_remote+0x6c/0x90 [ 2637.494044] bprm_execve+0xcb/0x1a60 [ 2637.494370] ? acct_arg_size+0xe0/0xe0 [ 2637.494715] ? downgrade_write+0x3a0/0x3a0 [ 2637.495112] ? open_exec+0x70/0x70 [ 2637.495425] ? memcpy+0x39/0x60 [ 2637.495724] ? copy_string_kernel+0x3b6/0x450 [ 2637.496127] do_execveat_common+0x772/0x8d0 [ 2637.496499] ? bprm_execve+0x1a60/0x1a60 [ 2637.496873] __x64_sys_execveat+0xed/0x140 [ 2637.497253] do_syscall_64+0x33/0x40 [ 2637.497576] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2637.498046] RIP: 0033:0x7fac73041b19 [ 2637.498372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2637.500110] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2637.500883] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2637.501614] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2637.502345] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2637.503039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2637.503759] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:56:15 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:15 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r1, 0xc) fcntl$dupfd(r2, 0x406, r1) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x4, 0xe4db, 0x5}) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:56:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 31) 13:56:15 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:15 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x28, r3, 0x329, 0x0, 0x0, {{0x5}, {@void, @val={0x69}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_SUBCMD, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_ID, @NL80211_ATTR_VENDOR_DATA={0x0, 0xc5, "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"}, @NL80211_ATTR_VENDOR_ID]}, 0x28}}, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 16) 13:56:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 1) [ 2651.347315] FAULT_INJECTION: forcing a failure. [ 2651.347315] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.348966] CPU: 0 PID: 19248 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2651.349735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.350678] Call Trace: [ 2651.350999] dump_stack+0x107/0x167 [ 2651.351434] should_fail.cold+0x5/0xa [ 2651.351881] ? prepare_creds+0x25/0x5e0 [ 2651.352351] should_failslab+0x5/0x20 [ 2651.352797] kmem_cache_alloc+0x5b/0x310 [ 2651.353279] ? __ia32_sys_unshare+0x40/0x40 [ 2651.353796] prepare_creds+0x25/0x5e0 [ 2651.354263] prepare_exec_creds+0xd/0x260 [ 2651.354741] bprm_execve+0x18f/0x1a60 [ 2651.355191] ? acct_arg_size+0xe0/0xe0 [ 2651.355650] ? downgrade_write+0x3a0/0x3a0 [ 2651.356147] ? open_exec+0x70/0x70 [ 2651.356561] ? memcpy+0x39/0x60 [ 2651.356951] ? copy_string_kernel+0x3b6/0x450 [ 2651.357497] do_execveat_common+0x772/0x8d0 [ 2651.358006] ? bprm_execve+0x1a60/0x1a60 [ 2651.358509] __x64_sys_execveat+0xed/0x140 [ 2651.359013] do_syscall_64+0x33/0x40 [ 2651.359446] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2651.360032] RIP: 0033:0x7fac73041b19 [ 2651.360472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.362777] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2651.363684] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2651.364526] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2651.365382] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.366234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2651.367042] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2651.368544] FAULT_INJECTION: forcing a failure. [ 2651.368544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2651.369807] CPU: 0 PID: 19257 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2651.370598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.371581] Call Trace: [ 2651.371899] dump_stack+0x107/0x167 [ 2651.372344] should_fail.cold+0x5/0xa [ 2651.372818] _copy_from_user+0x2e/0x1b0 [ 2651.373310] __copy_msghdr_from_user+0x91/0x4b0 [ 2651.373863] ? __ia32_sys_shutdown+0x80/0x80 [ 2651.374408] ? perf_trace_lock+0xac/0x490 [ 2651.374914] ? __lock_acquire+0xbb1/0x5b00 [ 2651.375440] sendmsg_copy_msghdr+0xa1/0x160 [ 2651.375971] ? do_recvmmsg+0x6d0/0x6d0 [ 2651.376446] ? perf_trace_lock+0xac/0x490 [ 2651.376950] ? SOFTIRQ_verbose+0x10/0x10 [ 2651.377442] ? __lockdep_reset_lock+0x180/0x180 [ 2651.378021] ? perf_trace_lock+0xac/0x490 [ 2651.378522] ? SOFTIRQ_verbose+0x10/0x10 [ 2651.379001] ___sys_sendmsg+0xc6/0x170 [ 2651.379453] ? sendmsg_copy_msghdr+0x160/0x160 [ 2651.379986] ? __fget_files+0x26d/0x4c0 [ 2651.380441] ? lock_downgrade+0x6d0/0x6d0 [ 2651.380919] ? find_held_lock+0x2c/0x110 [ 2651.381401] ? __fget_files+0x296/0x4c0 [ 2651.381961] ? __fget_light+0xea/0x290 [ 2651.382363] __sys_sendmsg+0xe5/0x1b0 [ 2651.382726] ? __sys_sendmsg_sock+0x40/0x40 [ 2651.383108] ? rcu_read_lock_any_held+0x75/0xa0 [ 2651.383515] ? fput_many+0x2f/0x1a0 [ 2651.383832] ? ksys_write+0x1a9/0x260 [ 2651.384166] ? __ia32_sys_read+0xb0/0xb0 [ 2651.384529] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2651.384982] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2651.385425] ? trace_hardirqs_on+0x5b/0x180 [ 2651.385804] do_syscall_64+0x33/0x40 [ 2651.386133] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2651.386578] RIP: 0033:0x7f8e1341db19 [ 2651.386904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.388482] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2651.389142] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2651.389759] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2651.390387] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.391004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2651.391622] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2651.394643] FAULT_INJECTION: forcing a failure. [ 2651.394643] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.395653] CPU: 0 PID: 19252 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2651.396269] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.396998] Call Trace: [ 2651.397239] dump_stack+0x107/0x167 [ 2651.397574] should_fail.cold+0x5/0xa [ 2651.397923] ? ptlock_alloc+0x1d/0x70 [ 2651.398276] should_failslab+0x5/0x20 [ 2651.398615] kmem_cache_alloc+0x5b/0x310 [ 2651.398989] ptlock_alloc+0x1d/0x70 [ 2651.399321] pte_alloc_one+0x68/0x1a0 [ 2651.399660] __pte_alloc+0x1d/0x330 [ 2651.399992] handle_mm_fault+0x287f/0x3500 [ 2651.400372] ? perf_trace_lock+0x2bd/0x490 13:56:16 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2651.400753] ? SOFTIRQ_verbose+0x10/0x10 [ 2651.401352] ? __pmd_alloc+0x5e0/0x5e0 [ 2651.402246] __get_user_pages+0x61b/0x1380 [ 2651.403154] ? follow_page_mask+0x1900/0x1900 [ 2651.404075] ? __lockdep_reset_lock+0x180/0x180 [ 2651.405013] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2651.406026] __get_user_pages_remote+0x1d5/0x870 [ 2651.407004] ? lock_downgrade+0x6d0/0x6d0 [ 2651.407883] get_user_pages_remote+0x63/0x90 [ 2651.408805] get_arg_page+0xba/0x200 [ 2651.409580] ? acct_arg_size+0xe0/0xe0 [ 2651.410380] ? downgrade_write+0x3a0/0x3a0 [ 2651.411250] ? count.constprop.0+0x1b3/0x290 [ 2651.412169] copy_string_kernel+0x1b4/0x450 [ 2651.413095] do_execveat_common+0x525/0x8d0 [ 2651.413981] ? bprm_execve+0x1a60/0x1a60 [ 2651.414881] __x64_sys_execveat+0xed/0x140 [ 2651.415770] do_syscall_64+0x33/0x40 [ 2651.416536] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2651.417557] RIP: 0033:0x7fde11765b19 [ 2651.418316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.421889] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2651.423428] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2651.424834] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2651.426270] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.427690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2651.429123] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:56:16 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2651.451897] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.7'. 13:56:16 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:16 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x7, &(0x7f0000000600)=[{&(0x7f0000000100)="832bdc2e905bd0ec102867da2cc90c28aaa73037a46cd6472aa6483d0aa6c0e9fb9a42395662f3f05760cb9bb456d76cc31eff5a3c821b330e4ae5e005835b4a7a9dcc5e21cf419adfe143fc53fd7b691b02b7ce81f3da118b", 0x59, 0x1}, {&(0x7f0000000180)="022fd8a474791a9df2105c9b82379d2999af5784a1910c7b5ffbf22a0daf19f4e4143770a6727b8d00c088286c6a3c10cd14ef62ba0e4406534dcf03a35a02594dcb5f63df3518506c5f3eb8ec11e6297f62ad987fe3091932e6f4ccf990a4b8f1778683f308c038aff634cfccc765c3028ab58a1130d26f82cd188ecc8af9b0d88d64661aa388fc586a1234ff7892e40f7d5ae0584b6dabffd6eb8457c8614eb74df9505a1c2ee84e53c12b9fb1e7641fd87341bdea6a24d1e5", 0xba, 0xfffffffffffffffa}, {&(0x7f0000000240)="d80eb673fab5620ceb8ad17600164f733617bf361b6912584b71c71e50a1bc567f9d99f61c74cfa4ed79fe985cdc5a0ebf44ae812f61d14c533d56cd667b4fd215a9b8195d437bce0f1562330c11e5724cb741b9d2624a58e49e576661ea12db45d6a6c788a77982373d812f9ed82abb32305253096df608d7562e184d90c5aa48c46e8b057d25c20530b04c90a819d7cea3da391e77f68087bccdcd4fb3a006320897d34f5a9882ffd7617fe99160d112132a5084e5f1fbac45e0ddad576eb528afea8561197f7d5e589483d33a3804517289eb49870f768d", 0xd9, 0x3}, {&(0x7f0000000340), 0x0, 0x1f}, {&(0x7f0000000380)="096981c5e4c86792541147fb04e26f74a3be7f4c7596e1f040abbe4333c0e708947357c8a9cddeacd58d500baa9af23eac1cc2f796457888eb721952027ea6cf954eb020b7ffdb480f05d82d04943357d03afaf1df08363d509f7e6d40893927800662f611228009b9168e6188eac30c1abb231d07ab27aba21935aa2ac315f398f52fd2250911358158c1fb96f15f623cc1dd7a1875f619540093eee94f3a052b54a98269927d79cab7499c905be19db44db30692d7f2", 0xb7, 0x8}, {&(0x7f0000000440)="531b09f46af6e963f78bd49aa34eae568bad0d877a74cea59842b886a5de85a57a2319b01dee7b6b5d17e3bd2e8cb4674e8001b396dc2006976830a7a23cb5e64d2e7a8102514e0eca999ed4fcc951349054b19a0e3ab65c4feb865dd180aafa173f406a24434fff4c6b02707d2ec600d876d41e6c07a0373144c679164c6414ad273d24afa707", 0x87, 0x5}, {&(0x7f0000000500)="51d8692b265dafffd705f82ba22c34c17b57555ff781225f10b87c78fa3b0aa33e251ae3964fd4e267eafb8fc02d1144c394d54edd91bc3a6c7be23f6bd8359ebc820f87bab746d08f7b88afce777536ca3aded860d51db9d527343ac8d530f4bf35a3775cf8bb24d23ba72631e4148c175f6bf700e75ac4ec0423a9bdfcf05721686cf27370565509c4a9ce319b224ac8318dc92f3c25539e8ad8c9940c9013d48e7cd15131feadb325b421866ec2acb1776d7f304e433ef6f8d43a426ac51a33356d0afc", 0xc5, 0x7}], 0x22000, &(0x7f00000006c0)={[{@debug}, {@oldalloc}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:56:16 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 32) 13:56:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 17) [ 2651.636422] FAULT_INJECTION: forcing a failure. [ 2651.636422] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.637511] CPU: 1 PID: 19274 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2651.638128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.638844] Call Trace: [ 2651.639087] dump_stack+0x107/0x167 [ 2651.639421] should_fail.cold+0x5/0xa [ 2651.639769] ? create_object.isra.0+0x3a/0xa20 [ 2651.640180] should_failslab+0x5/0x20 [ 2651.640523] kmem_cache_alloc+0x5b/0x310 [ 2651.640914] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2651.641606] create_object.isra.0+0x3a/0xa20 [ 2651.641997] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2651.642468] kmem_cache_alloc+0x159/0x310 [ 2651.642843] ptlock_alloc+0x1d/0x70 [ 2651.643172] pte_alloc_one+0x68/0x1a0 [ 2651.643509] __pte_alloc+0x1d/0x330 [ 2651.643838] handle_mm_fault+0x287f/0x3500 [ 2651.644225] ? perf_trace_lock+0xac/0x490 [ 2651.644587] ? SOFTIRQ_verbose+0x10/0x10 [ 2651.644950] ? __pmd_alloc+0x5e0/0x5e0 [ 2651.645305] __get_user_pages+0x61b/0x1380 [ 2651.645692] ? follow_page_mask+0x1900/0x1900 [ 2651.646101] ? __lockdep_reset_lock+0x180/0x180 [ 2651.646510] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2651.646919] __get_user_pages_remote+0x1d5/0x870 [ 2651.647319] ? lock_downgrade+0x6d0/0x6d0 [ 2651.647686] get_user_pages_remote+0x63/0x90 [ 2651.648073] get_arg_page+0xba/0x200 [ 2651.648394] ? acct_arg_size+0xe0/0xe0 [ 2651.648726] ? downgrade_write+0x3a0/0x3a0 [ 2651.649097] ? count.constprop.0+0x1b3/0x290 [ 2651.649481] copy_string_kernel+0x1b4/0x450 [ 2651.649860] do_execveat_common+0x525/0x8d0 [ 2651.650239] ? bprm_execve+0x1a60/0x1a60 [ 2651.650599] __x64_sys_execveat+0xed/0x140 [ 2651.650972] do_syscall_64+0x33/0x40 [ 2651.651300] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2651.651742] RIP: 0033:0x7fde11765b19 [ 2651.652057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.653541] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2651.654178] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2651.654764] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2651.655345] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.655927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2651.656513] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2651.662235] FAULT_INJECTION: forcing a failure. [ 2651.662235] name failslab, interval 1, probability 0, space 0, times 0 [ 2651.663699] CPU: 0 PID: 19278 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2651.664552] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2651.665568] Call Trace: [ 2651.665908] dump_stack+0x107/0x167 [ 2651.666385] should_fail.cold+0x5/0xa [ 2651.666868] ? create_object.isra.0+0x3a/0xa20 [ 2651.667441] should_failslab+0x5/0x20 [ 2651.667912] kmem_cache_alloc+0x5b/0x310 [ 2651.668437] create_object.isra.0+0x3a/0xa20 [ 2651.668991] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2651.669621] kmem_cache_alloc+0x159/0x310 [ 2651.670154] prepare_creds+0x25/0x5e0 [ 2651.670626] prepare_exec_creds+0xd/0x260 [ 2651.671146] bprm_execve+0x18f/0x1a60 [ 2651.671619] ? acct_arg_size+0xe0/0xe0 [ 2651.672096] ? downgrade_write+0x3a0/0x3a0 [ 2651.672624] ? open_exec+0x70/0x70 [ 2651.673062] ? memcpy+0x39/0x60 [ 2651.673473] ? copy_string_kernel+0x3b6/0x450 [ 2651.674049] do_execveat_common+0x772/0x8d0 [ 2651.674592] ? bprm_execve+0x1a60/0x1a60 [ 2651.675129] __x64_sys_execveat+0xed/0x140 [ 2651.675660] do_syscall_64+0x33/0x40 [ 2651.676128] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2651.676754] RIP: 0033:0x7fac73041b19 [ 2651.677217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2651.679444] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2651.680374] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2651.681235] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2651.682113] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2651.682975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2651.683842] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:56:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 18) 13:56:29 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 33) 13:56:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 2) [ 2664.743296] FAULT_INJECTION: forcing a failure. [ 2664.743296] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.745317] CPU: 0 PID: 19286 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2664.746493] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.747878] Call Trace: [ 2664.748333] dump_stack+0x107/0x167 [ 2664.748974] should_fail.cold+0x5/0xa [ 2664.749634] ? __anon_vma_prepare+0x62/0x500 [ 2664.750405] should_failslab+0x5/0x20 [ 2664.751060] kmem_cache_alloc+0x5b/0x310 [ 2664.751773] __anon_vma_prepare+0x62/0x500 [ 2664.752498] ? __pte_alloc+0x194/0x330 [ 2664.753179] handle_mm_fault+0x2b2d/0x3500 [ 2664.753907] ? perf_trace_lock+0x2bd/0x490 [ 2664.754646] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.755352] ? __pmd_alloc+0x5e0/0x5e0 [ 2664.756080] __get_user_pages+0x61b/0x1380 13:56:29 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x100009, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:29 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:56:29 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2664.756837] ? follow_page_mask+0x1900/0x1900 [ 2664.757850] ? __lockdep_reset_lock+0x180/0x180 [ 2664.758677] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2664.759525] __get_user_pages_remote+0x1d5/0x870 [ 2664.760355] ? lock_downgrade+0x6d0/0x6d0 [ 2664.761096] get_user_pages_remote+0x63/0x90 [ 2664.761877] get_arg_page+0xba/0x200 [ 2664.762530] ? acct_arg_size+0xe0/0xe0 [ 2664.763206] ? downgrade_write+0x3a0/0x3a0 [ 2664.763929] ? count.constprop.0+0x1b3/0x290 [ 2664.764711] copy_string_kernel+0x1b4/0x450 [ 2664.765466] do_execveat_common+0x525/0x8d0 [ 2664.766238] ? bprm_execve+0x1a60/0x1a60 [ 2664.766987] __x64_sys_execveat+0xed/0x140 [ 2664.767740] do_syscall_64+0x33/0x40 [ 2664.768390] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2664.769275] RIP: 0033:0x7fde11765b19 [ 2664.769922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.773082] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2664.774410] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2664.775642] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2664.776877] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.778163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2664.779546] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2664.794873] FAULT_INJECTION: forcing a failure. [ 2664.794873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2664.796835] CPU: 1 PID: 19298 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2664.797947] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.799346] Call Trace: [ 2664.799793] dump_stack+0x107/0x167 [ 2664.800397] should_fail.cold+0x5/0xa [ 2664.801029] _copy_from_user+0x2e/0x1b0 [ 2664.801678] iovec_from_user+0x141/0x400 [ 2664.802354] __import_iovec+0x67/0x590 [ 2664.802991] ? __ia32_sys_shutdown+0x80/0x80 [ 2664.803717] ? perf_trace_lock+0xac/0x490 [ 2664.804403] import_iovec+0x83/0xb0 [ 2664.805005] sendmsg_copy_msghdr+0x131/0x160 [ 2664.805724] ? do_recvmmsg+0x6d0/0x6d0 [ 2664.806370] ? perf_trace_lock+0xac/0x490 [ 2664.807050] ? __lockdep_reset_lock+0x180/0x180 [ 2664.807808] ? perf_trace_lock+0xac/0x490 [ 2664.808479] ? SOFTIRQ_verbose+0x10/0x10 [ 2664.809145] ___sys_sendmsg+0xc6/0x170 [ 2664.809777] ? sendmsg_copy_msghdr+0x160/0x160 [ 2664.810529] ? __fget_files+0x26d/0x4c0 [ 2664.811175] ? lock_downgrade+0x6d0/0x6d0 [ 2664.811847] ? find_held_lock+0x2c/0x110 [ 2664.812530] ? __fget_files+0x296/0x4c0 [ 2664.813191] ? __fget_light+0xea/0x290 [ 2664.813827] __sys_sendmsg+0xe5/0x1b0 [ 2664.814452] ? __sys_sendmsg_sock+0x40/0x40 [ 2664.815151] ? rcu_read_lock_any_held+0x75/0xa0 [ 2664.815908] ? fput_many+0x2f/0x1a0 [ 2664.816502] ? ksys_write+0x1a9/0x260 [ 2664.817131] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2664.817974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2664.818809] ? trace_hardirqs_on+0x5b/0x180 [ 2664.819517] do_syscall_64+0x33/0x40 [ 2664.820122] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2664.820923] RIP: 0033:0x7f8e1341db19 [ 2664.821528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.824365] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2664.825602] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2664.826753] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2664.827899] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.829047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2664.830197] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2664.834445] FAULT_INJECTION: forcing a failure. [ 2664.834445] name failslab, interval 1, probability 0, space 0, times 0 [ 2664.836583] CPU: 0 PID: 19293 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2664.837819] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2664.839293] Call Trace: [ 2664.839775] dump_stack+0x107/0x167 [ 2664.840447] should_fail.cold+0x5/0xa [ 2664.841144] ? security_prepare_creds+0x112/0x190 [ 2664.842014] should_failslab+0x5/0x20 [ 2664.842706] __kmalloc+0x72/0x390 [ 2664.843352] security_prepare_creds+0x112/0x190 [ 2664.844199] prepare_creds+0x452/0x5e0 [ 2664.844905] prepare_exec_creds+0xd/0x260 [ 2664.845653] bprm_execve+0x18f/0x1a60 [ 2664.846354] ? acct_arg_size+0xe0/0xe0 [ 2664.847055] ? downgrade_write+0x3a0/0x3a0 [ 2664.847827] ? open_exec+0x70/0x70 [ 2664.848469] ? memcpy+0x39/0x60 [ 2664.849072] ? copy_string_kernel+0x3b6/0x450 [ 2664.849901] do_execveat_common+0x772/0x8d0 [ 2664.850692] ? bprm_execve+0x1a60/0x1a60 [ 2664.851464] __x64_sys_execveat+0xed/0x140 [ 2664.852242] do_syscall_64+0x33/0x40 [ 2664.852912] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2664.853826] RIP: 0033:0x7fac73041b19 [ 2664.854501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2664.857747] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2664.859111] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2664.860379] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2664.861644] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2664.862921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2664.864184] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:56:29 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:29 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:29 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:29 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:56:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 19) 13:56:29 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:29 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 34) [ 2665.101551] FAULT_INJECTION: forcing a failure. [ 2665.101551] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.103635] CPU: 0 PID: 19314 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2665.104868] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.106342] Call Trace: [ 2665.106823] dump_stack+0x107/0x167 [ 2665.107489] should_fail.cold+0x5/0xa [ 2665.108176] ? create_object.isra.0+0x3a/0xa20 [ 2665.108997] should_failslab+0x5/0x20 [ 2665.109681] kmem_cache_alloc+0x5b/0x310 [ 2665.110432] create_object.isra.0+0x3a/0xa20 [ 2665.111219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2665.112137] kmem_cache_alloc+0x159/0x310 [ 2665.112899] __anon_vma_prepare+0x62/0x500 [ 2665.113655] ? __pte_alloc+0x194/0x330 [ 2665.114371] handle_mm_fault+0x2b2d/0x3500 [ 2665.115139] ? perf_trace_lock+0x2bd/0x490 [ 2665.115900] ? SOFTIRQ_verbose+0x10/0x10 [ 2665.116631] ? __pmd_alloc+0x5e0/0x5e0 [ 2665.117387] __get_user_pages+0x61b/0x1380 [ 2665.118167] ? follow_page_mask+0x1900/0x1900 [ 2665.118983] ? __lockdep_reset_lock+0x180/0x180 [ 2665.119810] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2665.120680] __get_user_pages_remote+0x1d5/0x870 [ 2665.121534] ? lock_downgrade+0x6d0/0x6d0 [ 2665.122305] get_user_pages_remote+0x63/0x90 [ 2665.123109] get_arg_page+0xba/0x200 [ 2665.123783] ? acct_arg_size+0xe0/0xe0 [ 2665.124477] ? downgrade_write+0x3a0/0x3a0 [ 2665.125241] ? count.constprop.0+0x1b3/0x290 [ 2665.126041] copy_string_kernel+0x1b4/0x450 [ 2665.126840] do_execveat_common+0x525/0x8d0 [ 2665.127624] ? bprm_execve+0x1a60/0x1a60 [ 2665.128390] __x64_sys_execveat+0xed/0x140 [ 2665.129165] do_syscall_64+0x33/0x40 [ 2665.129831] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2665.130749] RIP: 0033:0x7fde11765b19 [ 2665.131415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.134668] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2665.136021] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2665.137286] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2665.138555] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2665.139818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2665.141084] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2665.179821] FAULT_INJECTION: forcing a failure. [ 2665.179821] name failslab, interval 1, probability 0, space 0, times 0 [ 2665.181815] CPU: 1 PID: 19318 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2665.182942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2665.184285] Call Trace: [ 2665.184721] dump_stack+0x107/0x167 [ 2665.185325] should_fail.cold+0x5/0xa [ 2665.185952] ? create_object.isra.0+0x3a/0xa20 [ 2665.186704] should_failslab+0x5/0x20 [ 2665.187323] kmem_cache_alloc+0x5b/0x310 [ 2665.187992] create_object.isra.0+0x3a/0xa20 [ 2665.188705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2665.189531] __kmalloc+0x16e/0x390 [ 2665.190124] security_prepare_creds+0x112/0x190 [ 2665.190893] prepare_creds+0x452/0x5e0 [ 2665.191530] prepare_exec_creds+0xd/0x260 [ 2665.192208] bprm_execve+0x18f/0x1a60 [ 2665.192831] ? acct_arg_size+0xe0/0xe0 [ 2665.193460] ? downgrade_write+0x3a0/0x3a0 [ 2665.194152] ? open_exec+0x70/0x70 [ 2665.194740] ? memcpy+0x39/0x60 [ 2665.195284] ? copy_string_kernel+0x3b6/0x450 [ 2665.196027] do_execveat_common+0x772/0x8d0 [ 2665.196730] ? bprm_execve+0x1a60/0x1a60 [ 2665.197413] __x64_sys_execveat+0xed/0x140 [ 2665.198111] do_syscall_64+0x33/0x40 [ 2665.198731] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2665.199559] RIP: 0033:0x7fac73041b19 [ 2665.200163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2665.203114] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2665.204346] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2665.205493] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2665.206646] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2665.207792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2665.208941] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:56:44 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 35) 13:56:44 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 3) 13:56:44 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:44 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:44 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:56:44 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:44 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 20) [ 2680.297845] FAULT_INJECTION: forcing a failure. [ 2680.297845] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.299660] CPU: 1 PID: 19334 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2680.300683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.301968] Call Trace: [ 2680.302374] dump_stack+0x107/0x167 [ 2680.302988] should_fail.cold+0x5/0xa [ 2680.303578] ? __alloc_skb+0x6d/0x5b0 [ 2680.304194] should_failslab+0x5/0x20 [ 2680.304785] kmem_cache_alloc_node+0x55/0x330 [ 2680.305506] __alloc_skb+0x6d/0x5b0 [ 2680.306095] netlink_sendmsg+0x998/0xdf0 [ 2680.306780] ? netlink_unicast+0x7f0/0x7f0 [ 2680.307472] ? netlink_unicast+0x7f0/0x7f0 [ 2680.308126] __sock_sendmsg+0x154/0x190 [ 2680.308761] ____sys_sendmsg+0x70d/0x870 [ 2680.309408] ? sock_write_iter+0x3d0/0x3d0 [ 2680.310071] ? do_recvmmsg+0x6d0/0x6d0 [ 2680.310722] ? perf_trace_lock+0xac/0x490 [ 2680.311377] ? __lockdep_reset_lock+0x180/0x180 [ 2680.312122] ? perf_trace_lock+0xac/0x490 [ 2680.312779] ? SOFTIRQ_verbose+0x10/0x10 [ 2680.313419] ___sys_sendmsg+0xf3/0x170 [ 2680.314044] ? sendmsg_copy_msghdr+0x160/0x160 [ 2680.314793] ? lock_downgrade+0x6d0/0x6d0 [ 2680.315455] ? find_held_lock+0x2c/0x110 13:56:44 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2680.316120] ? __fget_files+0x296/0x4c0 [ 2680.316905] ? __fget_light+0xea/0x290 [ 2680.317533] __sys_sendmsg+0xe5/0x1b0 [ 2680.318119] ? __sys_sendmsg_sock+0x40/0x40 [ 2680.318833] ? rcu_read_lock_any_held+0x75/0xa0 [ 2680.319589] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2680.320387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2680.321195] ? trace_hardirqs_on+0x5b/0x180 [ 2680.321885] do_syscall_64+0x33/0x40 [ 2680.322463] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2680.323287] RIP: 0033:0x7f8e1341db19 [ 2680.323662] FAULT_INJECTION: forcing a failure. [ 2680.323662] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.323887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2680.323899] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2680.323920] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2680.323931] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2680.323951] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2680.333189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2680.334298] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2680.335461] CPU: 0 PID: 19329 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2680.336623] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.338010] Call Trace: [ 2680.338470] dump_stack+0x107/0x167 [ 2680.339098] should_fail.cold+0x5/0xa [ 2680.339745] ? __anon_vma_prepare+0x270/0x500 [ 2680.340509] should_failslab+0x5/0x20 [ 2680.341151] kmem_cache_alloc+0x5b/0x310 [ 2680.341850] __anon_vma_prepare+0x270/0x500 [ 2680.342623] ? __pte_alloc+0x194/0x330 [ 2680.343320] handle_mm_fault+0x2b2d/0x3500 [ 2680.344102] ? perf_trace_lock+0x2bd/0x490 [ 2680.344965] ? SOFTIRQ_verbose+0x10/0x10 [ 2680.345770] ? __pmd_alloc+0x5e0/0x5e0 [ 2680.346663] __get_user_pages+0x61b/0x1380 [ 2680.347580] ? follow_page_mask+0x1900/0x1900 [ 2680.348498] ? __lockdep_reset_lock+0x180/0x180 [ 2680.349439] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2680.350414] __get_user_pages_remote+0x1d5/0x870 [ 2680.351383] ? lock_downgrade+0x6d0/0x6d0 [ 2680.352269] get_user_pages_remote+0x63/0x90 [ 2680.352604] FAULT_INJECTION: forcing a failure. [ 2680.352604] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.353193] get_arg_page+0xba/0x200 [ 2680.353225] ? acct_arg_size+0xe0/0xe0 [ 2680.356338] ? downgrade_write+0x3a0/0x3a0 [ 2680.357177] ? count.constprop.0+0x1b3/0x290 [ 2680.358061] copy_string_kernel+0x1b4/0x450 [ 2680.358984] do_execveat_common+0x525/0x8d0 [ 2680.359841] ? bprm_execve+0x1a60/0x1a60 [ 2680.360682] __x64_sys_execveat+0xed/0x140 [ 2680.361531] do_syscall_64+0x33/0x40 [ 2680.362261] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2680.363275] RIP: 0033:0x7fde11765b19 [ 2680.364004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2680.367533] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2680.368984] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2680.370348] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2680.371728] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2680.373095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2680.374470] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2680.375904] CPU: 1 PID: 19337 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2680.376931] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.378145] Call Trace: [ 2680.378569] dump_stack+0x107/0x167 [ 2680.379103] should_fail.cold+0x5/0xa [ 2680.379673] ? __alloc_file+0x21/0x320 [ 2680.380233] ? __alloc_file+0x21/0x320 [ 2680.380812] should_failslab+0x5/0x20 [ 2680.381366] kmem_cache_alloc+0x5b/0x310 [ 2680.381963] ? kernel_text_address+0xf2/0x120 [ 2680.382659] __alloc_file+0x21/0x320 [ 2680.383190] alloc_empty_file+0x6d/0x170 [ 2680.383793] path_openat+0xe3/0x26e0 [ 2680.384340] ? lock_chain_count+0x20/0x20 [ 2680.384948] ? stack_trace_save+0x8c/0xc0 [ 2680.385563] ? stack_trace_consume_entry+0x160/0x160 [ 2680.386328] ? path_lookupat+0x860/0x860 [ 2680.386950] ? kasan_save_stack+0x32/0x40 [ 2680.387574] ? kasan_save_stack+0x1b/0x40 [ 2680.388248] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2680.389037] ? security_prepare_creds+0x112/0x190 [ 2680.389743] ? prepare_creds+0x452/0x5e0 [ 2680.390335] ? prepare_exec_creds+0xd/0x260 [ 2680.390979] ? bprm_execve+0x18f/0x1a60 [ 2680.391603] do_filp_open+0x190/0x3e0 [ 2680.392158] ? may_open_dev+0xf0/0xf0 [ 2680.392748] ? perf_trace_lock+0xac/0x490 [ 2680.393336] ? perf_trace_lock+0xac/0x490 [ 2680.393943] ? SOFTIRQ_verbose+0x10/0x10 [ 2680.394575] ? find_held_lock+0x2c/0x110 [ 2680.395189] do_open_execat+0x116/0x690 [ 2680.395759] ? __do_sys_uselib+0x5e0/0x5e0 [ 2680.396392] ? do_raw_spin_lock+0x121/0x260 [ 2680.397030] ? rwlock_bug.part.0+0x90/0x90 [ 2680.397660] bprm_execve+0x55e/0x1a60 [ 2680.398236] ? open_exec+0x70/0x70 [ 2680.398746] ? memcpy+0x39/0x60 [ 2680.399245] ? copy_string_kernel+0x3b6/0x450 [ 2680.399879] do_execveat_common+0x772/0x8d0 [ 2680.400528] ? bprm_execve+0x1a60/0x1a60 [ 2680.401127] __x64_sys_execveat+0xed/0x140 [ 2680.401769] do_syscall_64+0x33/0x40 [ 2680.402303] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2680.403069] RIP: 0033:0x7fac73041b19 [ 2680.403607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2680.406217] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2680.407338] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2680.408373] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2680.409400] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2680.410438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2680.411463] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:56:45 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:45 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:45 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:45 executing program 6: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d41bbaa, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xfdef) fallocate(r0, 0x3, 0x3, 0x8000008000) 13:56:45 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:45 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 4) 13:56:45 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2680.613554] FAULT_INJECTION: forcing a failure. [ 2680.613554] name failslab, interval 1, probability 0, space 0, times 0 [ 2680.615119] CPU: 1 PID: 19352 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2680.616002] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2680.617056] Call Trace: [ 2680.617406] dump_stack+0x107/0x167 [ 2680.617885] should_fail.cold+0x5/0xa [ 2680.618393] ? create_object.isra.0+0x3a/0xa20 [ 2680.618998] should_failslab+0x5/0x20 [ 2680.619492] kmem_cache_alloc+0x5b/0x310 [ 2680.620020] create_object.isra.0+0x3a/0xa20 [ 2680.620594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2680.621252] kmem_cache_alloc_node+0x169/0x330 [ 2680.621849] __alloc_skb+0x6d/0x5b0 [ 2680.622321] netlink_sendmsg+0x998/0xdf0 [ 2680.622855] ? netlink_unicast+0x7f0/0x7f0 [ 2680.623408] ? netlink_unicast+0x7f0/0x7f0 [ 2680.623952] __sock_sendmsg+0x154/0x190 [ 2680.624470] ____sys_sendmsg+0x70d/0x870 [ 2680.624997] ? sock_write_iter+0x3d0/0x3d0 [ 2680.625542] ? do_recvmmsg+0x6d0/0x6d0 [ 2680.626044] ? perf_trace_lock+0xac/0x490 [ 2680.626585] ? __lockdep_reset_lock+0x180/0x180 [ 2680.627180] ? perf_trace_lock+0xac/0x490 [ 2680.627720] ? SOFTIRQ_verbose+0x10/0x10 [ 2680.628254] ___sys_sendmsg+0xf3/0x170 [ 2680.628757] ? sendmsg_copy_msghdr+0x160/0x160 [ 2680.629349] ? lock_downgrade+0x6d0/0x6d0 [ 2680.629884] ? find_held_lock+0x2c/0x110 [ 2680.630431] ? __fget_files+0x296/0x4c0 [ 2680.630949] ? __fget_light+0xea/0x290 [ 2680.631450] __sys_sendmsg+0xe5/0x1b0 [ 2680.631933] ? __sys_sendmsg_sock+0x40/0x40 [ 2680.632478] ? rcu_read_lock_any_held+0x75/0xa0 [ 2680.633084] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2680.633747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2680.634401] ? trace_hardirqs_on+0x5b/0x180 [ 2680.634954] do_syscall_64+0x33/0x40 [ 2680.635424] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2680.636068] RIP: 0033:0x7f8e1341db19 [ 2680.636545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2680.638827] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2680.639779] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2680.640672] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2680.641561] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2680.642458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2680.643348] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 13:56:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 36) 13:56:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 5) 13:56:59 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:59 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}, {0x1fcb, 0x0, 0x7, 0x5}]}) r1 = socket$unix(0x1, 0x0, 0x0) pread64(r1, &(0x7f0000000140)=""/93, 0x5d, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40082102, 0x0) 13:56:59 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:59 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 21) [ 2694.807354] FAULT_INJECTION: forcing a failure. [ 2694.807354] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.809259] CPU: 0 PID: 19360 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2694.810402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.811770] Call Trace: [ 2694.812220] dump_stack+0x107/0x167 [ 2694.812830] should_fail.cold+0x5/0xa [ 2694.813474] should_failslab+0x5/0x20 [ 2694.814107] __kmalloc_node_track_caller+0x74/0x3b0 [ 2694.814939] ? netlink_sendmsg+0x998/0xdf0 [ 2694.815650] __alloc_skb+0xb1/0x5b0 [ 2694.816259] netlink_sendmsg+0x998/0xdf0 [ 2694.816938] ? netlink_unicast+0x7f0/0x7f0 [ 2694.817649] ? netlink_unicast+0x7f0/0x7f0 [ 2694.818351] __sock_sendmsg+0x154/0x190 [ 2694.819022] ____sys_sendmsg+0x70d/0x870 [ 2694.819701] ? sock_write_iter+0x3d0/0x3d0 [ 2694.820400] ? do_recvmmsg+0x6d0/0x6d0 [ 2694.821049] ? perf_trace_lock+0xac/0x490 [ 2694.821742] ? __lockdep_reset_lock+0x180/0x180 [ 2694.822516] ? perf_trace_lock+0xac/0x490 [ 2694.823213] ? SOFTIRQ_verbose+0x10/0x10 [ 2694.823887] ___sys_sendmsg+0xf3/0x170 [ 2694.824538] ? sendmsg_copy_msghdr+0x160/0x160 [ 2694.825300] ? lock_downgrade+0x6d0/0x6d0 [ 2694.825992] ? find_held_lock+0x2c/0x110 [ 2694.826686] ? __fget_files+0x296/0x4c0 [ 2694.827359] ? __fget_light+0xea/0x290 [ 2694.828002] __sys_sendmsg+0xe5/0x1b0 [ 2694.828634] ? __sys_sendmsg_sock+0x40/0x40 [ 2694.829331] ? rcu_read_lock_any_held+0x75/0xa0 [ 2694.830124] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2694.830999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2694.831850] ? trace_hardirqs_on+0x5b/0x180 [ 2694.832555] do_syscall_64+0x33/0x40 [ 2694.833174] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2694.833999] RIP: 0033:0x7f8e1341db19 [ 2694.834626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.837638] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2694.838870] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2694.840041] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2694.841209] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.842386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2694.843575] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2694.888572] FAULT_INJECTION: forcing a failure. [ 2694.888572] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.890767] CPU: 1 PID: 19373 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2694.892074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.893641] Call Trace: [ 2694.893676] FAULT_INJECTION: forcing a failure. [ 2694.893676] name failslab, interval 1, probability 0, space 0, times 0 [ 2694.894161] dump_stack+0x107/0x167 [ 2694.894204] should_fail.cold+0x5/0xa [ 2694.897472] ? create_object.isra.0+0x3a/0xa20 [ 2694.898359] should_failslab+0x5/0x20 [ 2694.899104] kmem_cache_alloc+0x5b/0x310 [ 2694.899904] create_object.isra.0+0x3a/0xa20 [ 2694.900748] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.901725] kmem_cache_alloc+0x159/0x310 [ 2694.902550] __alloc_file+0x21/0x320 [ 2694.903278] alloc_empty_file+0x6d/0x170 [ 2694.904059] path_openat+0xe3/0x26e0 [ 2694.904777] ? lock_chain_count+0x20/0x20 [ 2694.905574] ? stack_trace_save+0x8c/0xc0 [ 2694.906323] ? stack_trace_consume_entry+0x160/0x160 [ 2694.907293] ? path_lookupat+0x860/0x860 [ 2694.908083] ? kasan_save_stack+0x32/0x40 [ 2694.908863] ? kasan_save_stack+0x1b/0x40 [ 2694.909650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.910617] ? security_prepare_creds+0x112/0x190 [ 2694.911525] ? prepare_creds+0x452/0x5e0 [ 2694.912294] ? prepare_exec_creds+0xd/0x260 [ 2694.913105] ? bprm_execve+0x18f/0x1a60 [ 2694.913866] do_filp_open+0x190/0x3e0 [ 2694.914601] ? may_open_dev+0xf0/0xf0 [ 2694.915351] ? perf_trace_lock+0xac/0x490 [ 2694.916140] ? perf_trace_lock+0xac/0x490 [ 2694.916923] ? SOFTIRQ_verbose+0x10/0x10 [ 2694.917723] ? find_held_lock+0x2c/0x110 [ 2694.918505] do_open_execat+0x116/0x690 [ 2694.919273] ? __do_sys_uselib+0x5e0/0x5e0 [ 2694.920179] ? do_raw_spin_lock+0x121/0x260 [ 2694.921118] ? rwlock_bug.part.0+0x90/0x90 [ 2694.922071] bprm_execve+0x55e/0x1a60 [ 2694.922932] ? open_exec+0x70/0x70 [ 2694.923707] ? memcpy+0x39/0x60 [ 2694.924435] ? copy_string_kernel+0x3b6/0x450 [ 2694.925433] do_execveat_common+0x772/0x8d0 [ 2694.926370] ? bprm_execve+0x1a60/0x1a60 [ 2694.927302] __x64_sys_execveat+0xed/0x140 [ 2694.928251] do_syscall_64+0x33/0x40 [ 2694.929064] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2694.930165] RIP: 0033:0x7fac73041b19 [ 2694.930978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.934865] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2694.936504] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2694.938009] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2694.939531] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.941043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.942559] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2694.944124] CPU: 0 PID: 19371 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2694.945319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2694.946714] Call Trace: [ 2694.947186] dump_stack+0x107/0x167 [ 2694.947837] should_fail.cold+0x5/0xa [ 2694.948499] ? create_object.isra.0+0x3a/0xa20 [ 2694.949287] should_failslab+0x5/0x20 [ 2694.949946] kmem_cache_alloc+0x5b/0x310 [ 2694.950657] create_object.isra.0+0x3a/0xa20 [ 2694.951409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2694.952298] kmem_cache_alloc+0x159/0x310 [ 2694.953036] __anon_vma_prepare+0x270/0x500 [ 2694.953750] ? __pte_alloc+0x194/0x330 [ 2694.954430] handle_mm_fault+0x2b2d/0x3500 [ 2694.955180] ? perf_trace_lock+0x2bd/0x490 [ 2694.955916] ? SOFTIRQ_verbose+0x10/0x10 [ 2694.956599] ? __pmd_alloc+0x5e0/0x5e0 [ 2694.957321] __get_user_pages+0x61b/0x1380 [ 2694.958072] ? follow_page_mask+0x1900/0x1900 [ 2694.958850] ? __lockdep_reset_lock+0x180/0x180 [ 2694.959624] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2694.960462] __get_user_pages_remote+0x1d5/0x870 [ 2694.961275] ? lock_downgrade+0x6d0/0x6d0 [ 2694.962004] get_user_pages_remote+0x63/0x90 [ 2694.962772] get_arg_page+0xba/0x200 [ 2694.963419] ? acct_arg_size+0xe0/0xe0 [ 2694.964092] ? downgrade_write+0x3a0/0x3a0 [ 2694.964824] ? count.constprop.0+0x1b3/0x290 [ 2694.965579] copy_string_kernel+0x1b4/0x450 [ 2694.966342] do_execveat_common+0x525/0x8d0 [ 2694.967104] ? bprm_execve+0x1a60/0x1a60 [ 2694.967858] __x64_sys_execveat+0xed/0x140 [ 2694.968593] do_syscall_64+0x33/0x40 [ 2694.969238] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2694.970107] RIP: 0033:0x7fde11765b19 [ 2694.970749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2694.973826] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2694.975125] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2694.976319] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2694.977519] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2694.978723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2694.979931] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:56:59 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:56:59 executing program 6: sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4080) r0 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = gettid() kcmp(0x0, r1, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r0, r1, 0x18) r2 = syz_open_procfs(r0, &(0x7f0000000280)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x7, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYRES32=r2]) syz_io_uring_setup(0x3a75, &(0x7f0000000500)={0x0, 0x1cb2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) inotify_init1(0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002bc0)='clear_refs\x00') sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x3f7, 0x10, 0x70bd29, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x80) socket$netlink(0x10, 0x3, 0x12) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 13:56:59 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 6) 13:56:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2695.160826] FAULT_INJECTION: forcing a failure. [ 2695.160826] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.162676] CPU: 1 PID: 19389 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2695.163749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.165028] Call Trace: [ 2695.165444] dump_stack+0x107/0x167 [ 2695.166022] should_fail.cold+0x5/0xa [ 2695.166628] ? create_object.isra.0+0x3a/0xa20 [ 2695.167347] should_failslab+0x5/0x20 [ 2695.167938] kmem_cache_alloc+0x5b/0x310 [ 2695.168580] create_object.isra.0+0x3a/0xa20 [ 2695.169264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.170055] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2695.170844] ? netlink_sendmsg+0x998/0xdf0 [ 2695.171512] __alloc_skb+0xb1/0x5b0 [ 2695.172085] netlink_sendmsg+0x998/0xdf0 [ 2695.172722] ? netlink_unicast+0x7f0/0x7f0 [ 2695.173395] ? netlink_unicast+0x7f0/0x7f0 [ 2695.174053] __sock_sendmsg+0x154/0x190 [ 2695.174676] ____sys_sendmsg+0x70d/0x870 [ 2695.175314] ? sock_write_iter+0x3d0/0x3d0 [ 2695.175964] ? do_recvmmsg+0x6d0/0x6d0 [ 2695.176566] ? perf_trace_lock+0xac/0x490 [ 2695.177216] ? __lockdep_reset_lock+0x180/0x180 [ 2695.177935] ? perf_trace_lock+0xac/0x490 [ 2695.178583] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.179215] ___sys_sendmsg+0xf3/0x170 [ 2695.179821] ? sendmsg_copy_msghdr+0x160/0x160 [ 2695.180531] ? lock_downgrade+0x6d0/0x6d0 [ 2695.181172] ? find_held_lock+0x2c/0x110 [ 2695.181806] ? __fget_files+0x296/0x4c0 [ 2695.182430] ? __fget_light+0xea/0x290 [ 2695.183044] __sys_sendmsg+0xe5/0x1b0 [ 2695.183630] ? __sys_sendmsg_sock+0x40/0x40 [ 2695.184294] ? rcu_read_lock_any_held+0x75/0xa0 [ 2695.185029] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.185828] ? syscall_enter_from_user_mode+0x1d/0x50 13:56:59 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2695.186621] ? trace_hardirqs_on+0x5b/0x180 [ 2695.187520] do_syscall_64+0x33/0x40 [ 2695.188090] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2695.188866] RIP: 0033:0x7f8e1341db19 [ 2695.189432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.192208] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2695.193417] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2695.194626] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2695.195823] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.197021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2695.198219] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 13:56:59 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2695.221998] EXT4-fs (loop6): VFS: Can't find ext4 filesystem 13:56:59 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 37) 13:56:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) [ 2695.264904] FAULT_INJECTION: forcing a failure. [ 2695.264904] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.266804] CPU: 1 PID: 19398 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2695.267899] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.269183] Call Trace: [ 2695.269594] dump_stack+0x107/0x167 [ 2695.270177] should_fail.cold+0x5/0xa [ 2695.270804] ? create_object.isra.0+0x3a/0xa20 [ 2695.271525] should_failslab+0x5/0x20 [ 2695.272140] kmem_cache_alloc+0x5b/0x310 [ 2695.272907] create_object.isra.0+0x3a/0xa20 [ 2695.273605] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.274394] kmem_cache_alloc+0x159/0x310 [ 2695.275081] __alloc_file+0x21/0x320 [ 2695.275663] alloc_empty_file+0x6d/0x170 [ 2695.276313] path_openat+0xe3/0x26e0 [ 2695.276895] ? lock_chain_count+0x20/0x20 [ 2695.277553] ? stack_trace_save+0x8c/0xc0 [ 2695.278198] ? stack_trace_consume_entry+0x160/0x160 [ 2695.279015] ? path_lookupat+0x860/0x860 [ 2695.279677] ? kasan_save_stack+0x32/0x40 [ 2695.280317] ? kasan_save_stack+0x1b/0x40 [ 2695.280979] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.281759] ? security_prepare_creds+0x112/0x190 [ 2695.282521] ? prepare_creds+0x452/0x5e0 [ 2695.283171] ? prepare_exec_creds+0xd/0x260 [ 2695.283832] ? bprm_execve+0x18f/0x1a60 [ 2695.284467] do_filp_open+0x190/0x3e0 [ 2695.285069] ? may_open_dev+0xf0/0xf0 [ 2695.285688] ? perf_trace_lock+0xac/0x490 [ 2695.286359] ? perf_trace_lock+0xac/0x490 [ 2695.287027] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.287711] ? find_held_lock+0x2c/0x110 [ 2695.288360] do_open_execat+0x116/0x690 [ 2695.289013] ? __do_sys_uselib+0x5e0/0x5e0 [ 2695.289703] ? do_raw_spin_lock+0x121/0x260 [ 2695.290411] ? rwlock_bug.part.0+0x90/0x90 [ 2695.291125] bprm_execve+0x55e/0x1a60 [ 2695.291759] ? open_exec+0x70/0x70 [ 2695.292345] ? memcpy+0x39/0x60 [ 2695.292890] ? copy_string_kernel+0x3b6/0x450 [ 2695.293634] do_execveat_common+0x772/0x8d0 [ 2695.294346] ? bprm_execve+0x1a60/0x1a60 [ 2695.295040] __x64_sys_execveat+0xed/0x140 [ 2695.295744] do_syscall_64+0x33/0x40 [ 2695.296354] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2695.297191] RIP: 0033:0x7fac73041b19 [ 2695.297799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.300767] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2695.302000] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2695.303168] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2695.304316] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.305467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.306633] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:56:59 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 7) 13:56:59 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:56:59 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:59 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:56:59 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:57:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 22) [ 2695.421052] FAULT_INJECTION: forcing a failure. [ 2695.421052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2695.422882] CPU: 0 PID: 19405 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2695.423841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.424972] Call Trace: [ 2695.425341] dump_stack+0x107/0x167 [ 2695.425854] should_fail.cold+0x5/0xa [ 2695.426368] _copy_from_iter_full+0x201/0xa60 [ 2695.426994] ? __virt_addr_valid+0x128/0x350 [ 2695.427593] ? __check_object_size+0x319/0x440 [ 2695.428226] netlink_sendmsg+0x879/0xdf0 [ 2695.428776] ? netlink_unicast+0x7f0/0x7f0 [ 2695.429361] ? netlink_unicast+0x7f0/0x7f0 [ 2695.429938] __sock_sendmsg+0x154/0x190 [ 2695.430469] ____sys_sendmsg+0x70d/0x870 [ 2695.431037] ? sock_write_iter+0x3d0/0x3d0 [ 2695.431602] ? do_recvmmsg+0x6d0/0x6d0 [ 2695.432144] ? perf_trace_lock+0xac/0x490 [ 2695.432701] ? __lockdep_reset_lock+0x180/0x180 [ 2695.433328] ? perf_trace_lock+0xac/0x490 [ 2695.433890] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.434435] ___sys_sendmsg+0xf3/0x170 [ 2695.434987] ? sendmsg_copy_msghdr+0x160/0x160 [ 2695.435589] ? lock_downgrade+0x6d0/0x6d0 [ 2695.436167] ? find_held_lock+0x2c/0x110 [ 2695.436717] ? __fget_files+0x296/0x4c0 [ 2695.437268] ? __fget_light+0xea/0x290 [ 2695.437809] __sys_sendmsg+0xe5/0x1b0 [ 2695.438318] ? __sys_sendmsg_sock+0x40/0x40 [ 2695.438910] ? rcu_read_lock_any_held+0x75/0xa0 [ 2695.439544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2695.440260] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2695.440954] ? trace_hardirqs_on+0x5b/0x180 [ 2695.441537] do_syscall_64+0x33/0x40 [ 2695.442044] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2695.442740] RIP: 0033:0x7f8e1341db19 [ 2695.443249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.446329] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2695.447600] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2695.448554] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2695.449514] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.450649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2695.451590] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 13:57:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 38) [ 2695.468493] FAULT_INJECTION: forcing a failure. [ 2695.468493] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2695.470111] CPU: 0 PID: 19411 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2695.471049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.472144] Call Trace: [ 2695.472505] dump_stack+0x107/0x167 [ 2695.473018] should_fail.cold+0x5/0xa [ 2695.473537] __alloc_pages_nodemask+0x182/0x600 [ 2695.474175] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2695.474985] ? up_write+0x191/0x550 [ 2695.475479] ? rwlock_bug.part.0+0x90/0x90 [ 2695.476050] ? anon_vma_interval_tree_insert+0x277/0x450 [ 2695.476762] alloc_pages_vma+0xbb/0x410 [ 2695.477316] handle_mm_fault+0x152f/0x3500 [ 2695.477884] ? perf_trace_lock+0x2bd/0x490 [ 2695.478441] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.478999] ? __pmd_alloc+0x5e0/0x5e0 13:57:00 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 2695.479561] __get_user_pages+0x61b/0x1380 [ 2695.480287] ? follow_page_mask+0x1900/0x1900 [ 2695.480866] ? __lockdep_reset_lock+0x180/0x180 [ 2695.481448] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2695.482069] __get_user_pages_remote+0x1d5/0x870 [ 2695.482682] ? lock_downgrade+0x6d0/0x6d0 [ 2695.483224] get_user_pages_remote+0x63/0x90 [ 2695.483801] get_arg_page+0xba/0x200 [ 2695.484275] ? acct_arg_size+0xe0/0xe0 [ 2695.484763] ? downgrade_write+0x3a0/0x3a0 [ 2695.485305] ? count.constprop.0+0x1b3/0x290 [ 2695.485879] copy_string_kernel+0x1b4/0x450 [ 2695.486435] do_execveat_common+0x525/0x8d0 [ 2695.487020] ? bprm_execve+0x1a60/0x1a60 [ 2695.487603] __x64_sys_execveat+0xed/0x140 [ 2695.488184] do_syscall_64+0x33/0x40 [ 2695.488649] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2695.489294] RIP: 0033:0x7fde11765b19 [ 2695.489760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.492037] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2695.492974] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2695.493835] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2695.494799] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.495278] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 2695.495905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.495917] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2695.553073] FAULT_INJECTION: forcing a failure. [ 2695.553073] name failslab, interval 1, probability 0, space 0, times 0 [ 2695.555018] CPU: 1 PID: 19420 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2695.556090] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2695.557438] Call Trace: [ 2695.557876] dump_stack+0x107/0x167 [ 2695.558481] should_fail.cold+0x5/0xa [ 2695.559120] ? create_object.isra.0+0x3a/0xa20 [ 2695.559871] should_failslab+0x5/0x20 [ 2695.560494] kmem_cache_alloc+0x5b/0x310 [ 2695.561162] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2695.562061] create_object.isra.0+0x3a/0xa20 [ 2695.562760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.563500] kmem_cache_alloc+0x159/0x310 [ 2695.564112] security_file_alloc+0x34/0x170 [ 2695.564739] __alloc_file+0xb7/0x320 [ 2695.565287] alloc_empty_file+0x6d/0x170 [ 2695.565882] path_openat+0xe3/0x26e0 [ 2695.566432] ? lock_chain_count+0x20/0x20 [ 2695.567040] ? stack_trace_save+0x8c/0xc0 [ 2695.567646] ? stack_trace_consume_entry+0x160/0x160 [ 2695.568380] ? path_lookupat+0x860/0x860 [ 2695.568981] ? kasan_save_stack+0x32/0x40 [ 2695.569581] ? kasan_save_stack+0x1b/0x40 [ 2695.570182] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2695.570920] ? security_prepare_creds+0x112/0x190 [ 2695.571620] ? prepare_creds+0x452/0x5e0 [ 2695.572209] ? prepare_exec_creds+0xd/0x260 [ 2695.572830] ? bprm_execve+0x18f/0x1a60 [ 2695.573416] do_filp_open+0x190/0x3e0 [ 2695.573969] ? may_open_dev+0xf0/0xf0 [ 2695.574547] ? perf_trace_lock+0xac/0x490 [ 2695.575150] ? perf_trace_lock+0xac/0x490 [ 2695.575747] ? SOFTIRQ_verbose+0x10/0x10 [ 2695.576356] ? find_held_lock+0x2c/0x110 [ 2695.576955] do_open_execat+0x116/0x690 [ 2695.577535] ? __do_sys_uselib+0x5e0/0x5e0 [ 2695.578151] ? do_raw_spin_lock+0x121/0x260 [ 2695.578786] ? rwlock_bug.part.0+0x90/0x90 [ 2695.579419] bprm_execve+0x55e/0x1a60 [ 2695.579986] ? open_exec+0x70/0x70 [ 2695.580508] ? memcpy+0x39/0x60 [ 2695.580992] ? copy_string_kernel+0x3b6/0x450 [ 2695.581654] do_execveat_common+0x772/0x8d0 [ 2695.582284] ? bprm_execve+0x1a60/0x1a60 [ 2695.582901] __x64_sys_execveat+0xed/0x140 [ 2695.583524] do_syscall_64+0x33/0x40 [ 2695.584071] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2695.584811] RIP: 0033:0x7fac73041b19 [ 2695.585357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2695.588010] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2695.589106] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2695.590134] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2695.591170] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2695.592198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2695.593225] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2710.716618] FAULT_INJECTION: forcing a failure. [ 2710.716618] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.718458] CPU: 1 PID: 19429 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2710.719619] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.721421] Call Trace: [ 2710.721855] dump_stack+0x107/0x167 [ 2710.722448] should_fail.cold+0x5/0xa [ 2710.723085] ? xfrm_state_alloc+0x21/0x4e0 [ 2710.723774] should_failslab+0x5/0x20 [ 2710.724384] kmem_cache_alloc+0x5b/0x310 [ 2710.725034] ? __nla_validate_parse+0x2d8/0x2b10 [ 2710.725803] xfrm_state_alloc+0x21/0x4e0 [ 2710.726449] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2710.727315] xfrm_add_sa+0xd3b/0x3510 [ 2710.727924] ? xfrm_send_acquire+0xa50/0xa50 [ 2710.728611] ? security_capable+0x95/0xc0 [ 2710.729308] ? __nla_parse+0x3e/0x50 [ 2710.729881] ? xfrm_send_acquire+0xa50/0xa50 [ 2710.730561] xfrm_user_rcv_msg+0x416/0x830 [ 2710.731237] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2710.732201] ? __mutex_lock+0x4fe/0x10b0 13:57:15 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 23) 13:57:15 executing program 6: getxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x5f, 0x0, 0x0, 0x0, 0x613e, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2030, 0x0, 0x4, 0x0, 0x0, 0x200000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x4, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1, 0xfffffffc}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2000, @fd, 0x7, &(0x7f00000010c0)=""/223, 0xdf, 0x20, 0x1}, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x23457, 0x0, 0x0, 0x1}, 0x62) r4 = syz_io_uring_setup(0x4d4f, &(0x7f00000003c0)={0x0, 0xfe53, 0x0, 0xfffffffe, 0xa7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000180), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r4, r0, r3], 0x3}, 0xa3ca) sendmsg$inet6(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r6, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000140)={0x401}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000380)=0x9, 0x4) 13:57:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:57:15 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 13:57:15 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:15 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 39) 13:57:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 8) 13:57:15 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2710.733001] ? __lockdep_reset_lock+0x180/0x180 [ 2710.734021] netlink_rcv_skb+0x14b/0x430 [ 2710.734856] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2710.735858] ? netlink_ack+0xab0/0xab0 [ 2710.736672] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2710.737542] xfrm_netlink_rcv+0x6b/0x90 [ 2710.738290] netlink_unicast+0x549/0x7f0 [ 2710.739077] ? netlink_attachskb+0x870/0x870 [ 2710.739890] ? __virt_addr_valid+0x128/0x350 [ 2710.740638] netlink_sendmsg+0x90f/0xdf0 [ 2710.741281] ? netlink_unicast+0x7f0/0x7f0 [ 2710.741963] ? netlink_unicast+0x7f0/0x7f0 [ 2710.742615] __sock_sendmsg+0x154/0x190 [ 2710.743253] ____sys_sendmsg+0x70d/0x870 [ 2710.743879] ? sock_write_iter+0x3d0/0x3d0 [ 2710.744530] ? do_recvmmsg+0x6d0/0x6d0 [ 2710.745139] ? perf_trace_lock+0xac/0x490 [ 2710.745773] ? __lockdep_reset_lock+0x180/0x180 [ 2710.746496] ? perf_trace_lock+0xac/0x490 [ 2710.747169] ? SOFTIRQ_verbose+0x10/0x10 [ 2710.747790] ___sys_sendmsg+0xf3/0x170 [ 2710.748399] ? sendmsg_copy_msghdr+0x160/0x160 [ 2710.749117] ? lock_downgrade+0x6d0/0x6d0 [ 2710.749764] ? find_held_lock+0x2c/0x110 [ 2710.750426] ? __fget_files+0x296/0x4c0 [ 2710.751086] ? __fget_light+0xea/0x290 [ 2710.751685] __sys_sendmsg+0xe5/0x1b0 [ 2710.752286] ? __sys_sendmsg_sock+0x40/0x40 [ 2710.752961] ? rcu_read_lock_any_held+0x75/0xa0 [ 2710.753724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2710.754550] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2710.755363] ? trace_hardirqs_on+0x5b/0x180 [ 2710.756037] do_syscall_64+0x33/0x40 [ 2710.756600] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2710.757390] RIP: 0033:0x7f8e1341db19 [ 2710.757971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.759324] FAULT_INJECTION: forcing a failure. [ 2710.759324] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.760735] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2710.760792] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2710.760805] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2710.760828] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.767203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2710.768284] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2710.769408] CPU: 0 PID: 19439 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2710.770920] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.772704] Call Trace: [ 2710.773308] dump_stack+0x107/0x167 [ 2710.774133] should_fail.cold+0x5/0xa [ 2710.774994] ? dup_fd+0x89/0xcf0 [ 2710.775751] should_failslab+0x5/0x20 [ 2710.776585] kmem_cache_alloc+0x5b/0x310 [ 2710.777475] ? __lockdep_reset_lock+0x180/0x180 [ 2710.778485] ? avc_has_perm_noaudit+0x1f7/0x3e0 [ 2710.779531] dup_fd+0x89/0xcf0 [ 2710.780303] unshare_files+0x175/0x270 [ 2710.781166] ? __ia32_sys_unshare+0x40/0x40 [ 2710.782124] ? get_user_pages_remote+0x63/0x90 [ 2710.783127] ? get_user_pages_remote+0x6c/0x90 [ 2710.784147] bprm_execve+0xcb/0x1a60 [ 2710.784980] ? acct_arg_size+0xe0/0xe0 [ 2710.785832] ? downgrade_write+0x3a0/0x3a0 [ 2710.786793] ? open_exec+0x70/0x70 [ 2710.787585] ? memcpy+0x39/0x60 [ 2710.788322] ? copy_string_kernel+0x3b6/0x450 [ 2710.789345] do_execveat_common+0x772/0x8d0 [ 2710.790310] ? bprm_execve+0x1a60/0x1a60 [ 2710.791275] __x64_sys_execveat+0xed/0x140 [ 2710.792230] do_syscall_64+0x33/0x40 [ 2710.793058] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2710.794177] RIP: 0033:0x7fde11765b19 [ 2710.794972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.795139] FAULT_INJECTION: forcing a failure. [ 2710.795139] name failslab, interval 1, probability 0, space 0, times 0 [ 2710.798165] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2710.798192] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2710.798207] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2710.798221] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.798234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.798258] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2710.807107] CPU: 1 PID: 19440 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2710.808156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2710.809404] Call Trace: [ 2710.809814] dump_stack+0x107/0x167 [ 2710.810407] should_fail.cold+0x5/0xa [ 2710.811021] ? jbd2__journal_start+0x190/0x7e0 [ 2710.811714] should_failslab+0x5/0x20 [ 2710.812306] kmem_cache_alloc+0x5b/0x310 [ 2710.812951] jbd2__journal_start+0x190/0x7e0 [ 2710.813631] __ext4_journal_start_sb+0x214/0x390 [ 2710.814421] ext4_dirty_inode+0xbc/0x130 [ 2710.815070] ? ext4_setattr+0x2160/0x2160 [ 2710.815714] __mark_inode_dirty+0x492/0xd40 [ 2710.816396] touch_atime+0x5ea/0x6e0 [ 2710.816979] ? atime_needs_update+0x600/0x600 [ 2710.817656] ? pagecache_get_page+0x243/0xc80 [ 2710.818371] generic_file_buffered_read+0x191a/0x2920 [ 2710.819205] ? pagecache_get_page+0xc80/0xc80 [ 2710.819904] ? __lock_acquire+0xbb1/0x5b00 [ 2710.820568] generic_file_read_iter+0x33f/0x490 [ 2710.821310] ext4_file_read_iter+0x184/0x4c0 [ 2710.822015] __kernel_read+0x593/0xaa0 [ 2710.822611] ? do_sendfile+0x1090/0x1090 [ 2710.823260] ? _cond_resched+0x12/0x80 [ 2710.823855] ? avc_policy_seqno+0x9/0x70 [ 2710.824483] ? selinux_file_permission+0x92/0x520 [ 2710.825236] ? lock_downgrade+0x6d0/0x6d0 13:57:15 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 2710.825878] kernel_read+0x52/0x70 [ 2710.826691] bprm_execve+0x882/0x1a60 [ 2710.827330] ? open_exec+0x70/0x70 [ 2710.827896] ? memcpy+0x39/0x60 [ 2710.828432] ? copy_string_kernel+0x3b6/0x450 [ 2710.829162] do_execveat_common+0x772/0x8d0 [ 2710.829835] ? bprm_execve+0x1a60/0x1a60 [ 2710.830518] __x64_sys_execveat+0xed/0x140 [ 2710.831264] do_syscall_64+0x33/0x40 [ 2710.831856] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2710.832705] RIP: 0033:0x7fac73041b19 13:57:15 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2710.833324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2710.836834] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2710.838319] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2710.839714] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2710.841095] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2710.842471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2710.843636] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:57:15 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:15 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2710.916544] EXT4-fs warning (device sda): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed 13:57:15 executing program 4: write(0xffffffffffffffff, &(0x7f0000000180)="d9", 0x1) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:57:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 24) 13:57:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 9) 13:57:29 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(0x0, &(0x7f00000010c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='mnt/encrypted_dir\x00', 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='mnt/encrypted_dir\x00') mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="0000ff0000000000"], &(0x7f0000000140)='mnt/encrypted_dir\x00', 0x0, 0x201000, 0x0) rename(&(0x7f0000000180)='mnt/encrypted_dir\x00', &(0x7f00000001c0)='./file0\x00') 13:57:29 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 1) 13:57:29 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:29 executing program 4: write(0xffffffffffffffff, &(0x7f0000000180)="d9", 0x1) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:57:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 40) 13:57:29 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2725.264800] FAULT_INJECTION: forcing a failure. [ 2725.264800] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.266504] CPU: 1 PID: 19467 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2725.267523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2725.268689] Call Trace: [ 2725.269097] dump_stack+0x107/0x167 [ 2725.269659] should_fail.cold+0x5/0xa [ 2725.270235] ? avc_has_extended_perms+0xf40/0xf40 [ 2725.270964] ? create_object.isra.0+0x3a/0xa20 [ 2725.271656] should_failslab+0x5/0x20 [ 2725.272230] kmem_cache_alloc+0x5b/0x310 [ 2725.272848] create_object.isra.0+0x3a/0xa20 [ 2725.273509] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2725.274282] kmem_cache_alloc+0x159/0x310 [ 2725.274922] xfrm_state_alloc+0x21/0x4e0 [ 2725.275535] ? __sanitizer_cov_trace_switch+0x45/0x80 [ 2725.276314] xfrm_add_sa+0xd3b/0x3510 [ 2725.276883] ? xfrm_send_acquire+0xa50/0xa50 [ 2725.277518] ? security_capable+0x95/0xc0 [ 2725.278148] ? __nla_parse+0x3e/0x50 [ 2725.278699] ? xfrm_send_acquire+0xa50/0xa50 [ 2725.279376] xfrm_user_rcv_msg+0x416/0x830 [ 2725.280034] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2725.280824] ? __mutex_lock+0x4fe/0x10b0 [ 2725.281413] ? __lockdep_reset_lock+0x180/0x180 [ 2725.282092] netlink_rcv_skb+0x14b/0x430 [ 2725.282709] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2725.283472] ? netlink_ack+0xab0/0xab0 [ 2725.284084] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2725.284776] xfrm_netlink_rcv+0x6b/0x90 [ 2725.285360] netlink_unicast+0x549/0x7f0 [ 2725.285959] ? netlink_attachskb+0x870/0x870 [ 2725.286593] ? __virt_addr_valid+0x128/0x350 [ 2725.287262] netlink_sendmsg+0x90f/0xdf0 [ 2725.287859] ? netlink_unicast+0x7f0/0x7f0 [ 2725.288489] ? netlink_unicast+0x7f0/0x7f0 [ 2725.289106] __sock_sendmsg+0x154/0x190 [ 2725.289685] ____sys_sendmsg+0x70d/0x870 [ 2725.290266] ? sock_write_iter+0x3d0/0x3d0 [ 2725.290872] ? do_recvmmsg+0x6d0/0x6d0 [ 2725.291446] ? perf_trace_lock+0xac/0x490 [ 2725.292057] ? __lockdep_reset_lock+0x180/0x180 [ 2725.292759] ? perf_trace_lock+0xac/0x490 [ 2725.293364] ? SOFTIRQ_verbose+0x10/0x10 [ 2725.293972] ___sys_sendmsg+0xf3/0x170 [ 2725.294564] ? sendmsg_copy_msghdr+0x160/0x160 [ 2725.295267] ? lock_downgrade+0x6d0/0x6d0 [ 2725.295899] ? find_held_lock+0x2c/0x110 [ 2725.296506] ? __fget_files+0x296/0x4c0 [ 2725.297126] ? __fget_light+0xea/0x290 [ 2725.297702] __sys_sendmsg+0xe5/0x1b0 [ 2725.298263] ? __sys_sendmsg_sock+0x40/0x40 [ 2725.298954] ? rcu_read_lock_any_held+0x75/0xa0 [ 2725.299654] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2725.300408] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2725.301148] ? trace_hardirqs_on+0x5b/0x180 [ 2725.301777] do_syscall_64+0x33/0x40 [ 2725.302321] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2725.303064] RIP: 0033:0x7f8e1341db19 [ 2725.303604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.304650] FAULT_INJECTION: forcing a failure. [ 2725.304650] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.306286] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2725.306309] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2725.306321] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2725.306333] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2725.306344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2725.306356] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2725.316431] CPU: 0 PID: 19471 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2725.317610] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2725.319035] Call Trace: [ 2725.319504] dump_stack+0x107/0x167 [ 2725.320155] should_fail.cold+0x5/0xa [ 2725.320823] ? alloc_pipe_info+0x10a/0x590 [ 2725.321567] should_failslab+0x5/0x20 [ 2725.322235] kmem_cache_alloc_trace+0x55/0x320 [ 2725.323043] alloc_pipe_info+0x10a/0x590 [ 2725.323762] splice_direct_to_actor+0x774/0x980 [ 2725.324576] ? _cond_resched+0x12/0x80 [ 2725.325258] ? pipe_to_sendpage+0x380/0x380 [ 2725.326003] ? selinux_file_permission+0x92/0x520 [ 2725.326848] ? do_splice_to+0x160/0x160 [ 2725.327542] ? security_file_permission+0x24e/0x570 [ 2725.328445] do_splice_direct+0x1c4/0x290 [ 2725.329164] ? splice_direct_to_actor+0x980/0x980 [ 2725.329982] ? selinux_file_permission+0x92/0x520 [ 2725.330832] ? security_file_permission+0x24e/0x570 [ 2725.331726] vfs_copy_file_range+0x4f8/0x1290 [ 2725.332530] ? generic_file_rw_checks+0x240/0x240 [ 2725.333375] ? __fget_files+0x296/0x4c0 [ 2725.334113] __do_sys_copy_file_range+0x193/0x420 [ 2725.334211] FAULT_INJECTION: forcing a failure. [ 2725.334211] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.334955] ? vfs_copy_file_range+0x1290/0x1290 [ 2725.334976] ? ksys_write+0x1a9/0x260 [ 2725.335004] ? __ia32_sys_read+0xb0/0xb0 [ 2725.338700] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2725.339635] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2725.340555] do_syscall_64+0x33/0x40 [ 2725.341214] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2725.342098] RIP: 0033:0x7f823ae79b19 [ 2725.342741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.345882] RSP: 002b:00007f82383ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2725.347221] RAX: ffffffffffffffda RBX: 00007f823af8cf60 RCX: 00007f823ae79b19 [ 2725.348460] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2725.349693] RBP: 00007f82383ef1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2725.350945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2725.352203] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 [ 2725.353487] CPU: 1 PID: 19474 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2725.354485] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2725.355686] Call Trace: [ 2725.356076] dump_stack+0x107/0x167 [ 2725.356612] should_fail.cold+0x5/0xa [ 2725.357168] ? create_object.isra.0+0x3a/0xa20 [ 2725.357825] should_failslab+0x5/0x20 [ 2725.358370] kmem_cache_alloc+0x5b/0x310 [ 2725.358970] create_object.isra.0+0x3a/0xa20 [ 2725.359594] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2725.360326] kmem_cache_alloc+0x159/0x310 [ 2725.360927] ? __lockdep_reset_lock+0x180/0x180 [ 2725.361594] dup_fd+0x89/0xcf0 [ 2725.362081] unshare_files+0x175/0x270 [ 2725.362648] ? __ia32_sys_unshare+0x40/0x40 [ 2725.363288] ? get_user_pages_remote+0x63/0x90 [ 2725.363939] ? get_user_pages_remote+0x6c/0x90 [ 2725.364371] FAULT_INJECTION: forcing a failure. [ 2725.364371] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.364606] bprm_execve+0xcb/0x1a60 [ 2725.367018] ? acct_arg_size+0xe0/0xe0 [ 2725.367575] ? downgrade_write+0x3a0/0x3a0 [ 2725.368195] ? open_exec+0x70/0x70 [ 2725.368705] ? memcpy+0x39/0x60 [ 2725.369185] ? copy_string_kernel+0x3b6/0x450 [ 2725.369848] do_execveat_common+0x772/0x8d0 [ 2725.370475] ? bprm_execve+0x1a60/0x1a60 [ 2725.371093] __x64_sys_execveat+0xed/0x140 [ 2725.371713] do_syscall_64+0x33/0x40 [ 2725.372254] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2725.372978] RIP: 0033:0x7fde11765b19 [ 2725.373518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.376095] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2725.377186] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2725.378201] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2725.379225] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2725.380241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2725.381267] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2725.382318] CPU: 0 PID: 19472 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2725.383524] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2725.384943] Call Trace: [ 2725.385415] dump_stack+0x107/0x167 [ 2725.386064] should_fail.cold+0x5/0xa [ 2725.386745] ? create_object.isra.0+0x3a/0xa20 [ 2725.387546] should_failslab+0x5/0x20 [ 2725.388211] kmem_cache_alloc+0x5b/0x310 [ 2725.388927] create_object.isra.0+0x3a/0xa20 [ 2725.389680] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2725.390569] kmem_cache_alloc+0x159/0x310 [ 2725.391313] jbd2__journal_start+0x190/0x7e0 [ 2725.392097] __ext4_journal_start_sb+0x214/0x390 [ 2725.392931] ext4_dirty_inode+0xbc/0x130 [ 2725.393664] ? ext4_setattr+0x2160/0x2160 [ 2725.394391] __mark_inode_dirty+0x492/0xd40 [ 2725.395189] touch_atime+0x5ea/0x6e0 [ 2725.395842] ? atime_needs_update+0x600/0x600 [ 2725.396640] ? pagecache_get_page+0x243/0xc80 [ 2725.397449] generic_file_buffered_read+0x191a/0x2920 [ 2725.398411] ? pagecache_get_page+0xc80/0xc80 [ 2725.399256] generic_file_read_iter+0x33f/0x490 [ 2725.400107] ext4_file_read_iter+0x184/0x4c0 [ 2725.400890] __kernel_read+0x593/0xaa0 [ 2725.401603] ? do_sendfile+0x1090/0x1090 [ 2725.402327] ? _cond_resched+0x12/0x80 [ 2725.403033] ? avc_policy_seqno+0x9/0x70 [ 2725.403751] ? selinux_file_permission+0x92/0x520 [ 2725.404607] ? lock_downgrade+0x6d0/0x6d0 [ 2725.405356] kernel_read+0x52/0x70 [ 2725.406003] bprm_execve+0x882/0x1a60 [ 2725.406699] ? open_exec+0x70/0x70 [ 2725.407345] ? memcpy+0x39/0x60 [ 2725.407938] ? copy_string_kernel+0x3b6/0x450 [ 2725.408745] do_execveat_common+0x772/0x8d0 [ 2725.409510] ? bprm_execve+0x1a60/0x1a60 [ 2725.410273] __x64_sys_execveat+0xed/0x140 [ 2725.411041] do_syscall_64+0x33/0x40 [ 2725.411714] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2725.412622] RIP: 0033:0x7fac73041b19 [ 2725.413285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.416418] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2725.417732] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2725.418952] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2725.420172] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2725.421394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2725.422614] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:57:30 executing program 4: write(0xffffffffffffffff, &(0x7f0000000180)="d9", 0x1) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r0, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:57:30 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:30 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:57:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 10) [ 2725.625100] FAULT_INJECTION: forcing a failure. [ 2725.625100] name failslab, interval 1, probability 0, space 0, times 0 [ 2725.626766] CPU: 1 PID: 19486 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2725.627741] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2725.628958] Call Trace: [ 2725.629360] dump_stack+0x107/0x167 [ 2725.629920] should_fail.cold+0x5/0xa [ 2725.630518] should_failslab+0x5/0x20 [ 2725.631102] __kmalloc_track_caller+0x79/0x370 [ 2725.631790] ? xfrm_add_sa+0x1314/0x3510 [ 2725.632417] kmemdup+0x23/0x50 [ 2725.632908] xfrm_add_sa+0x1314/0x3510 [ 2725.633484] ? xfrm_send_acquire+0xa50/0xa50 [ 2725.634119] ? security_capable+0x95/0xc0 [ 2725.634746] ? __nla_parse+0x3e/0x50 [ 2725.635324] ? xfrm_send_acquire+0xa50/0xa50 [ 2725.635978] xfrm_user_rcv_msg+0x416/0x830 [ 2725.636626] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2725.637444] ? __mutex_lock+0x4fe/0x10b0 [ 2725.638030] ? __lockdep_reset_lock+0x180/0x180 [ 2725.638730] netlink_rcv_skb+0x14b/0x430 [ 2725.639315] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2725.640065] ? netlink_ack+0xab0/0xab0 [ 2725.640668] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2725.641356] xfrm_netlink_rcv+0x6b/0x90 [ 2725.641950] netlink_unicast+0x549/0x7f0 [ 2725.642561] ? netlink_attachskb+0x870/0x870 [ 2725.643228] ? __virt_addr_valid+0x128/0x350 [ 2725.643899] netlink_sendmsg+0x90f/0xdf0 [ 2725.644490] ? netlink_unicast+0x7f0/0x7f0 [ 2725.645122] ? netlink_unicast+0x7f0/0x7f0 [ 2725.645758] __sock_sendmsg+0x154/0x190 [ 2725.646359] ____sys_sendmsg+0x70d/0x870 [ 2725.646982] ? sock_write_iter+0x3d0/0x3d0 [ 2725.647610] ? do_recvmmsg+0x6d0/0x6d0 [ 2725.648199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2725.649000] ? trace_hardirqs_on+0x5b/0x180 [ 2725.649632] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 2725.650447] ___sys_sendmsg+0xf3/0x170 [ 2725.651006] ? sendmsg_copy_msghdr+0x160/0x160 [ 2725.651668] ? lock_downgrade+0x6d0/0x6d0 [ 2725.652269] ? find_held_lock+0x2c/0x110 [ 2725.652869] ? __fget_files+0x296/0x4c0 [ 2725.653445] ? __fget_light+0xea/0x290 [ 2725.654041] __sys_sendmsg+0xe5/0x1b0 [ 2725.654582] ? __sys_sendmsg_sock+0x40/0x40 [ 2725.655235] ? rcu_read_lock_any_held+0x75/0xa0 [ 2725.655953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2725.656705] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2725.657470] ? trace_hardirqs_on+0x5b/0x180 [ 2725.658124] do_syscall_64+0x33/0x40 [ 2725.658651] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2725.659395] RIP: 0033:0x7f8e1341db19 [ 2725.659950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2725.662483] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2725.663622] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2725.664679] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2725.665686] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2725.666732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2725.667792] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 13:57:47 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 2) 13:57:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 25) 13:57:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 41) 13:57:47 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:47 executing program 4: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:47 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x80000007, 0xffff7ff9}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000080)=0x1088, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004540)=[{{&(0x7f0000000000)={0x2, 0x4e23, 0x0, @private0}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x2, 0x7, 0x4, 0x52f, 0x8001}) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000180)={0x3, 0x5}) readv(r1, &(0x7f0000000340)=[{&(0x7f0000002340)=""/4101, 0x1005}, {&(0x7f0000000380)=""/99}], 0x1000000000000009) pwrite64(r1, &(0x7f0000000240)="3e5b16e900afd16fff57ff37b1597593f59e2cec1ddc23874c6abd139a13b96debd198", 0x23, 0x3) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x8000, 0x4, 0x3, 0x1]}, &(0x7f00000000c0)=0x54) unshare(0x48020200) syz_open_dev$sg(&(0x7f0000000080), 0x80000001, 0x39b341) 13:57:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 11) 13:57:47 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2742.681199] FAULT_INJECTION: forcing a failure. [ 2742.681199] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.682166] CPU: 1 PID: 19496 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2742.682712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.683374] Call Trace: [ 2742.683593] dump_stack+0x107/0x167 [ 2742.683890] should_fail.cold+0x5/0xa [ 2742.684200] ? create_object.isra.0+0x3a/0xa20 [ 2742.684569] should_failslab+0x5/0x20 [ 2742.684872] kmem_cache_alloc+0x5b/0x310 [ 2742.685202] create_object.isra.0+0x3a/0xa20 [ 2742.685553] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2742.685963] __kmalloc_track_caller+0x177/0x370 [ 2742.686332] ? xfrm_add_sa+0x1314/0x3510 [ 2742.686664] kmemdup+0x23/0x50 [ 2742.686922] xfrm_add_sa+0x1314/0x3510 [ 2742.687247] ? xfrm_send_acquire+0xa50/0xa50 [ 2742.687615] ? security_capable+0x95/0xc0 [ 2742.687949] ? __nla_parse+0x3e/0x50 [ 2742.688252] ? xfrm_send_acquire+0xa50/0xa50 [ 2742.688601] xfrm_user_rcv_msg+0x416/0x830 [ 2742.688894] FAULT_INJECTION: forcing a failure. [ 2742.688894] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.689797] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2742.690242] ? __mutex_lock+0x4fe/0x10b0 [ 2742.690572] ? __lockdep_reset_lock+0x180/0x180 [ 2742.690963] netlink_rcv_skb+0x14b/0x430 [ 2742.691298] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2742.691698] ? netlink_ack+0xab0/0xab0 [ 2742.692030] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2742.692395] xfrm_netlink_rcv+0x6b/0x90 [ 2742.692732] netlink_unicast+0x549/0x7f0 [ 2742.693061] ? netlink_attachskb+0x870/0x870 [ 2742.693422] ? __virt_addr_valid+0x128/0x350 [ 2742.693778] netlink_sendmsg+0x90f/0xdf0 [ 2742.694125] ? netlink_unicast+0x7f0/0x7f0 [ 2742.694471] ? netlink_unicast+0x7f0/0x7f0 [ 2742.694826] __sock_sendmsg+0x154/0x190 [ 2742.695154] ____sys_sendmsg+0x70d/0x870 [ 2742.695496] ? sock_write_iter+0x3d0/0x3d0 [ 2742.695831] ? do_recvmmsg+0x6d0/0x6d0 [ 2742.696167] ? perf_trace_lock+0xac/0x490 [ 2742.696501] ? __lockdep_reset_lock+0x180/0x180 [ 2742.696868] ? perf_trace_lock+0xac/0x490 [ 2742.697198] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.697539] ___sys_sendmsg+0xf3/0x170 [ 2742.697847] ? sendmsg_copy_msghdr+0x160/0x160 [ 2742.698226] ? lock_downgrade+0x6d0/0x6d0 [ 2742.698562] ? find_held_lock+0x2c/0x110 [ 2742.698920] ? __fget_files+0x296/0x4c0 [ 2742.699284] ? __fget_light+0xea/0x290 [ 2742.699623] __sys_sendmsg+0xe5/0x1b0 [ 2742.699948] ? __sys_sendmsg_sock+0x40/0x40 [ 2742.700305] ? rcu_read_lock_any_held+0x75/0xa0 [ 2742.700719] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.701155] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.701585] ? trace_hardirqs_on+0x5b/0x180 [ 2742.701955] do_syscall_64+0x33/0x40 [ 2742.702265] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2742.702688] RIP: 0033:0x7f8e1341db19 [ 2742.702986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.704474] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2742.705118] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2742.705711] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2742.706312] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.706889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.707483] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2742.708096] CPU: 0 PID: 19503 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2742.708914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.709845] Call Trace: [ 2742.710154] dump_stack+0x107/0x167 [ 2742.710589] should_fail.cold+0x5/0xa [ 2742.711049] ? create_object.isra.0+0x3a/0xa20 [ 2742.711584] should_failslab+0x5/0x20 [ 2742.712014] kmem_cache_alloc+0x5b/0x310 [ 2742.712490] create_object.isra.0+0x3a/0xa20 [ 2742.712990] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2742.713576] kmem_cache_alloc_trace+0x151/0x320 [ 2742.714112] alloc_pipe_info+0x10a/0x590 [ 2742.714580] splice_direct_to_actor+0x774/0x980 [ 2742.714948] FAULT_INJECTION: forcing a failure. [ 2742.714948] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.715109] ? _cond_resched+0x12/0x80 [ 2742.715130] ? pipe_to_sendpage+0x380/0x380 [ 2742.716935] ? selinux_file_permission+0x92/0x520 [ 2742.717479] ? do_splice_to+0x160/0x160 [ 2742.717928] ? security_file_permission+0x24e/0x570 [ 2742.718501] do_splice_direct+0x1c4/0x290 [ 2742.718968] ? splice_direct_to_actor+0x980/0x980 [ 2742.719554] ? selinux_file_permission+0x92/0x520 [ 2742.720108] ? security_file_permission+0x24e/0x570 [ 2742.720688] vfs_copy_file_range+0x4f8/0x1290 [ 2742.721205] ? generic_file_rw_checks+0x240/0x240 [ 2742.721750] ? __fget_files+0x296/0x4c0 [ 2742.722228] __do_sys_copy_file_range+0x193/0x420 [ 2742.722776] ? vfs_copy_file_range+0x1290/0x1290 [ 2742.723316] ? ksys_write+0x1a9/0x260 [ 2742.723746] ? __ia32_sys_read+0xb0/0xb0 [ 2742.724213] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.724797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.725384] do_syscall_64+0x33/0x40 [ 2742.725803] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2742.726377] RIP: 0033:0x7f823ae79b19 [ 2742.726799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.728834] RSP: 002b:00007f82383ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2742.729685] RAX: ffffffffffffffda RBX: 00007f823af8cf60 RCX: 00007f823ae79b19 [ 2742.730477] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2742.731276] RBP: 00007f82383ef1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2742.732065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2742.732855] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 [ 2742.733695] CPU: 1 PID: 19498 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2742.734278] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.734975] Call Trace: [ 2742.735223] dump_stack+0x107/0x167 [ 2742.735527] should_fail.cold+0x5/0xa [ 2742.735846] ? alloc_fdtable+0x84/0x280 [ 2742.736181] should_failslab+0x5/0x20 [ 2742.736494] kmem_cache_alloc_trace+0x55/0x320 [ 2742.736884] ? rwlock_bug.part.0+0x90/0x90 [ 2742.737235] alloc_fdtable+0x84/0x280 [ 2742.737561] dup_fd+0x74d/0xcf0 [ 2742.737851] unshare_files+0x175/0x270 [ 2742.738176] ? __ia32_sys_unshare+0x40/0x40 [ 2742.738549] ? get_user_pages_remote+0x63/0x90 [ 2742.738930] ? get_user_pages_remote+0x6c/0x90 [ 2742.739314] bprm_execve+0xcb/0x1a60 [ 2742.739621] ? acct_arg_size+0xe0/0xe0 [ 2742.739950] ? downgrade_write+0x3a0/0x3a0 [ 2742.740308] ? open_exec+0x70/0x70 [ 2742.740601] ? memcpy+0x39/0x60 [ 2742.740874] ? copy_string_kernel+0x3b6/0x450 [ 2742.741245] do_execveat_common+0x772/0x8d0 [ 2742.741600] ? bprm_execve+0x1a60/0x1a60 [ 2742.741952] __x64_sys_execveat+0xed/0x140 [ 2742.742310] do_syscall_64+0x33/0x40 [ 2742.742617] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2742.743047] RIP: 0033:0x7fde11765b19 [ 2742.743384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.744887] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2742.745520] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2742.746095] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2742.746682] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.747271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.747845] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2742.762243] FAULT_INJECTION: forcing a failure. [ 2742.762243] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.763586] CPU: 0 PID: 19505 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2742.764360] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.765286] Call Trace: [ 2742.765591] dump_stack+0x107/0x167 [ 2742.766013] should_fail.cold+0x5/0xa [ 2742.766452] should_failslab+0x5/0x20 [ 2742.766883] __kmalloc_track_caller+0x79/0x370 [ 2742.767408] ? bprm_change_interp+0x7c/0xf0 [ 2742.767901] kstrdup+0x36/0x70 [ 2742.768268] bprm_change_interp+0x7c/0xf0 [ 2742.768739] load_misc_binary+0x3a5/0xb70 [ 2742.769227] bprm_execve+0x969/0x1a60 [ 2742.769672] ? open_exec+0x70/0x70 [ 2742.770081] ? memcpy+0x39/0x60 [ 2742.770455] ? copy_string_kernel+0x3b6/0x450 [ 2742.770964] do_execveat_common+0x772/0x8d0 [ 2742.771465] ? bprm_execve+0x1a60/0x1a60 [ 2742.771953] __x64_sys_execveat+0xed/0x140 [ 2742.772438] do_syscall_64+0x33/0x40 [ 2742.772859] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2742.773434] RIP: 0033:0x7fac73041b19 [ 2742.773855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.775901] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2742.776755] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2742.777552] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2742.778344] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.779135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.779899] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:57:47 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 12) 13:57:47 executing program 4: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:47 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 13:57:47 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 26) [ 2742.843544] FAULT_INJECTION: forcing a failure. [ 2742.843544] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.844857] CPU: 0 PID: 19510 Comm: syz-executor.0 Not tainted 5.10.209 #1 [ 2742.845591] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.846466] Call Trace: [ 2742.846750] dump_stack+0x107/0x167 [ 2742.847162] should_fail.cold+0x5/0xa [ 2742.847575] ? crypto_create_tfm_node+0x84/0x340 [ 2742.848085] should_failslab+0x5/0x20 [ 2742.848489] __kmalloc_node+0x76/0x420 [ 2742.848916] crypto_create_tfm_node+0x84/0x340 [ 2742.849428] crypto_alloc_tfm_node+0x108/0x270 [ 2742.849921] esp_init_aead+0xf6/0x2f0 [ 2742.850349] ? esp6_destroy+0x60/0x60 [ 2742.850775] ? xfrm_state_get_afinfo+0x20/0x2b0 [ 2742.851306] ? static_obj+0xa0/0xc0 [ 2742.851719] ? __xfrm_init_state+0x6ca/0x1490 [ 2742.852219] ? lock_downgrade+0x6d0/0x6d0 [ 2742.852694] esp6_init_state+0x7a/0x420 [ 2742.853142] __xfrm_init_state+0x778/0x1490 [ 2742.853627] xfrm_add_sa+0x1ec5/0x3510 [ 2742.854068] ? xfrm_send_acquire+0xa50/0xa50 [ 2742.854554] ? security_capable+0x95/0xc0 [ 2742.855013] ? __nla_parse+0x3e/0x50 [ 2742.855434] ? xfrm_send_acquire+0xa50/0xa50 [ 2742.855924] xfrm_user_rcv_msg+0x416/0x830 [ 2742.856375] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2742.856967] ? __mutex_lock+0x4fe/0x10b0 [ 2742.857415] ? __lockdep_reset_lock+0x180/0x180 [ 2742.857932] netlink_rcv_skb+0x14b/0x430 [ 2742.858379] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2742.858929] ? netlink_ack+0xab0/0xab0 [ 2742.859364] ? netlink_deliver_tap+0x1c4/0xcd0 [ 2742.859879] xfrm_netlink_rcv+0x6b/0x90 [ 2742.860319] netlink_unicast+0x549/0x7f0 [ 2742.860774] ? netlink_attachskb+0x870/0x870 [ 2742.861244] ? __virt_addr_valid+0x128/0x350 [ 2742.861707] netlink_sendmsg+0x90f/0xdf0 [ 2742.862156] ? netlink_unicast+0x7f0/0x7f0 [ 2742.862635] ? netlink_unicast+0x7f0/0x7f0 [ 2742.863112] __sock_sendmsg+0x154/0x190 [ 2742.863550] ____sys_sendmsg+0x70d/0x870 [ 2742.863999] ? sock_write_iter+0x3d0/0x3d0 [ 2742.864450] ? do_recvmmsg+0x6d0/0x6d0 [ 2742.864877] ? perf_trace_lock+0xac/0x490 [ 2742.865340] ? __lockdep_reset_lock+0x180/0x180 [ 2742.865858] ? perf_trace_lock+0xac/0x490 [ 2742.866328] ? SOFTIRQ_verbose+0x10/0x10 [ 2742.866781] ___sys_sendmsg+0xf3/0x170 [ 2742.867230] ? sendmsg_copy_msghdr+0x160/0x160 [ 2742.867740] ? lock_downgrade+0x6d0/0x6d0 [ 2742.868208] ? find_held_lock+0x2c/0x110 [ 2742.868665] ? __fget_files+0x296/0x4c0 [ 2742.869118] ? __fget_light+0xea/0x290 [ 2742.869557] __sys_sendmsg+0xe5/0x1b0 [ 2742.869983] ? __sys_sendmsg_sock+0x40/0x40 [ 2742.870460] ? rcu_read_lock_any_held+0x75/0xa0 [ 2742.870996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2742.871583] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2742.872152] ? trace_hardirqs_on+0x5b/0x180 [ 2742.872631] do_syscall_64+0x33/0x40 [ 2742.873047] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2742.873609] RIP: 0033:0x7f8e1341db19 [ 2742.874032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.876042] RSP: 002b:00007f8e10993188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2742.876877] RAX: ffffffffffffffda RBX: 00007f8e13530f60 RCX: 00007f8e1341db19 [ 2742.877656] RDX: 0000000000000000 RSI: 0000000020002e00 RDI: 0000000000000003 [ 2742.878442] RBP: 00007f8e109931d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.879232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.879512] FAULT_INJECTION: forcing a failure. [ 2742.879512] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.880013] R13: 00007ffc769ced4f R14: 00007f8e10993300 R15: 0000000000022000 [ 2742.881648] CPU: 1 PID: 19516 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2742.882232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.882913] Call Trace: [ 2742.883157] dump_stack+0x107/0x167 [ 2742.883468] should_fail.cold+0x5/0xa [ 2742.883795] ? create_object.isra.0+0x3a/0xa20 [ 2742.884176] should_failslab+0x5/0x20 [ 2742.884490] kmem_cache_alloc+0x5b/0x310 [ 2742.884844] create_object.isra.0+0x3a/0xa20 [ 2742.885214] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2742.885652] kmem_cache_alloc_trace+0x151/0x320 [ 2742.886046] ? rwlock_bug.part.0+0x90/0x90 [ 2742.886412] alloc_fdtable+0x84/0x280 [ 2742.886727] dup_fd+0x74d/0xcf0 [ 2742.887024] unshare_files+0x175/0x270 [ 2742.887378] ? __ia32_sys_unshare+0x40/0x40 [ 2742.887739] ? get_user_pages_remote+0x63/0x90 [ 2742.888102] ? get_user_pages_remote+0x6c/0x90 [ 2742.888472] bprm_execve+0xcb/0x1a60 [ 2742.888773] ? acct_arg_size+0xe0/0xe0 [ 2742.889089] ? downgrade_write+0x3a0/0x3a0 [ 2742.889448] ? open_exec+0x70/0x70 [ 2742.889740] ? memcpy+0x39/0x60 [ 2742.890005] ? copy_string_kernel+0x3b6/0x450 [ 2742.890373] do_execveat_common+0x772/0x8d0 [ 2742.890723] ? bprm_execve+0x1a60/0x1a60 [ 2742.891062] __x64_sys_execveat+0xed/0x140 [ 2742.891437] do_syscall_64+0x33/0x40 [ 2742.891741] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2742.892148] RIP: 0033:0x7fde11765b19 [ 2742.892451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.893946] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2742.894576] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2742.895170] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2742.895769] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.896367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.896954] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:57:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 42) [ 2742.931259] FAULT_INJECTION: forcing a failure. [ 2742.931259] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.932322] CPU: 1 PID: 19519 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2742.932897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.933603] Call Trace: [ 2742.933831] dump_stack+0x107/0x167 [ 2742.934156] should_fail.cold+0x5/0xa [ 2742.934494] ? jbd2__journal_start+0x190/0x7e0 [ 2742.934875] should_failslab+0x5/0x20 [ 2742.935216] kmem_cache_alloc+0x5b/0x310 [ 2742.935559] jbd2__journal_start+0x190/0x7e0 [ 2742.935960] __ext4_journal_start_sb+0x214/0x390 [ 2742.936359] ext4_dirty_inode+0xbc/0x130 [ 2742.936722] ? ext4_setattr+0x2160/0x2160 [ 2742.937064] __mark_inode_dirty+0x492/0xd40 [ 2742.937440] touch_atime+0x5ea/0x6e0 [ 2742.937746] ? atime_needs_update+0x600/0x600 [ 2742.938145] ? pagecache_get_page+0x243/0xc80 [ 2742.938525] generic_file_buffered_read+0x191a/0x2920 [ 2742.939013] ? pagecache_get_page+0xc80/0xc80 [ 2742.939402] ? __lock_acquire+0xbb1/0x5b00 [ 2742.939783] generic_file_read_iter+0x33f/0x490 [ 2742.940185] ext4_file_read_iter+0x184/0x4c0 [ 2742.940577] __kernel_read+0x593/0xaa0 [ 2742.940895] ? do_sendfile+0x1090/0x1090 [ 2742.941233] ? _cond_resched+0x12/0x80 [ 2742.941549] ? avc_policy_seqno+0x9/0x70 [ 2742.941878] ? selinux_file_permission+0x92/0x520 [ 2742.942266] ? lock_downgrade+0x6d0/0x6d0 [ 2742.942609] kernel_read+0x52/0x70 [ 2742.942898] bprm_execve+0x882/0x1a60 [ 2742.943238] ? open_exec+0x70/0x70 [ 2742.943537] ? memcpy+0x39/0x60 [ 2742.943814] ? copy_string_kernel+0x3b6/0x450 [ 2742.944197] do_execveat_common+0x772/0x8d0 [ 2742.944563] ? bprm_execve+0x1a60/0x1a60 [ 2742.944912] __x64_sys_execveat+0xed/0x140 [ 2742.945269] do_syscall_64+0x33/0x40 [ 2742.945577] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2742.946003] RIP: 0033:0x7fac73041b19 [ 2742.946323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.947786] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2742.948411] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2742.948998] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2742.949585] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.950181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2742.950784] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:58:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:58:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 43) 13:58:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 27) 13:58:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:58:05 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 3) 13:58:05 executing program 6: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="00fe26f08c717172e91d11fcf1d03e37d0a9cdc5246497e6e9be2a52b04fa488404cabd15439f170e42bdd5057d7d5db566fcde481b1128bce328ef44be2ac02ea82a613a077c2508b07638c2da855795a8523c7986a4979fc9300627bae481812a27b8f03511a4dfbfc96803b89f81308e3333c922356976789cf995521a65b9192b2dde0498242f304269068000000000000"], &(0x7f0000000340)=""/106, 0x6a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe66f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x2030}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) recvmmsg(r0, 0x0, 0x0, 0x16060, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1001, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c42000001010300000000000000000600000000060a124000000000"], 0x1c}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0xfffffdef}], 0x1}, 0x10044001) recvmmsg(r1, &(0x7f0000000000), 0x5ac, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0x401}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, 0xffffffffffffffff) 13:58:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) (fail_nth: 13) 13:58:05 executing program 4: r0 = memfd_create(0x0, 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2760.515073] FAULT_INJECTION: forcing a failure. [ 2760.515073] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.516411] CPU: 1 PID: 19525 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2760.517153] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2760.518029] Call Trace: [ 2760.518322] dump_stack+0x107/0x167 [ 2760.518718] should_fail.cold+0x5/0xa [ 2760.519126] ? getname_kernel+0x4e/0x370 [ 2760.519571] ? getname_kernel+0x4e/0x370 [ 2760.520009] should_failslab+0x5/0x20 [ 2760.520419] kmem_cache_alloc+0x5b/0x310 [ 2760.520864] getname_kernel+0x4e/0x370 [ 2760.521286] open_exec+0x13/0x70 [ 2760.521658] load_misc_binary+0x973/0xb70 [ 2760.522126] bprm_execve+0x969/0x1a60 [ 2760.522542] ? open_exec+0x70/0x70 [ 2760.522927] ? memcpy+0x39/0x60 [ 2760.523284] ? copy_string_kernel+0x3b6/0x450 [ 2760.523785] do_execveat_common+0x772/0x8d0 [ 2760.524250] ? bprm_execve+0x1a60/0x1a60 [ 2760.524363] FAULT_INJECTION: forcing a failure. [ 2760.524363] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.524709] __x64_sys_execveat+0xed/0x140 [ 2760.524740] do_syscall_64+0x33/0x40 [ 2760.527491] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2760.528033] RIP: 0033:0x7fac73041b19 [ 2760.528423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.530345] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2760.531147] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2760.531903] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2760.532618] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2760.533363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2760.534083] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2760.534867] CPU: 0 PID: 19534 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2760.536102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2760.537545] Call Trace: [ 2760.538026] dump_stack+0x107/0x167 [ 2760.538684] should_fail.cold+0x5/0xa [ 2760.539381] ? alloc_pipe_info+0x1e5/0x590 [ 2760.540137] should_failslab+0x5/0x20 [ 2760.540806] __kmalloc+0x72/0x390 [ 2760.541423] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2760.542328] alloc_pipe_info+0x1e5/0x590 [ 2760.543060] splice_direct_to_actor+0x774/0x980 [ 2760.543892] ? _cond_resched+0x12/0x80 [ 2760.544586] ? pipe_to_sendpage+0x380/0x380 [ 2760.545346] ? selinux_file_permission+0x92/0x520 [ 2760.546207] ? do_splice_to+0x160/0x160 [ 2760.546920] ? security_file_permission+0x24e/0x570 [ 2760.547837] do_splice_direct+0x1c4/0x290 [ 2760.548571] ? splice_direct_to_actor+0x980/0x980 [ 2760.549402] ? selinux_file_permission+0x92/0x520 [ 2760.550265] ? security_file_permission+0x24e/0x570 [ 2760.551162] vfs_copy_file_range+0x4f8/0x1290 [ 2760.551991] ? generic_file_rw_checks+0x240/0x240 [ 2760.552852] ? __fget_files+0x296/0x4c0 [ 2760.553606] __do_sys_copy_file_range+0x193/0x420 [ 2760.554466] ? vfs_copy_file_range+0x1290/0x1290 [ 2760.555296] ? ksys_write+0x1a9/0x260 [ 2760.556027] ? __ia32_sys_read+0xb0/0xb0 [ 2760.556755] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2760.557672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2760.558577] do_syscall_64+0x33/0x40 [ 2760.559237] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2760.560125] RIP: 0033:0x7f823ae79b19 [ 2760.560782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.563889] RSP: 002b:00007f82383ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2760.565218] RAX: ffffffffffffffda RBX: 00007f823af8cf60 RCX: 00007f823ae79b19 [ 2760.566460] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2760.567717] RBP: 00007f82383ef1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2760.568958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2760.570198] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 13:58:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:58:05 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2760.587666] FAULT_INJECTION: forcing a failure. [ 2760.587666] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.588932] CPU: 1 PID: 19537 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2760.589641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2760.590481] Call Trace: [ 2760.590770] dump_stack+0x107/0x167 [ 2760.591169] should_fail.cold+0x5/0xa [ 2760.591566] ? kvmalloc_node+0x119/0x170 [ 2760.591975] should_failslab+0x5/0x20 [ 2760.592360] __kmalloc_node+0x76/0x420 [ 2760.592758] kvmalloc_node+0x119/0x170 [ 2760.593153] alloc_fdtable+0xd3/0x280 [ 2760.593541] dup_fd+0x74d/0xcf0 [ 2760.593886] unshare_files+0x175/0x270 [ 2760.594278] ? __ia32_sys_unshare+0x40/0x40 [ 2760.594715] ? get_user_pages_remote+0x63/0x90 [ 2760.595174] ? get_user_pages_remote+0x6c/0x90 [ 2760.595645] bprm_execve+0xcb/0x1a60 [ 2760.596023] ? acct_arg_size+0xe0/0xe0 [ 2760.596414] ? downgrade_write+0x3a0/0x3a0 [ 2760.596840] ? open_exec+0x70/0x70 [ 2760.597198] ? memcpy+0x39/0x60 [ 2760.597536] ? copy_string_kernel+0x3b6/0x450 [ 2760.597991] do_execveat_common+0x772/0x8d0 [ 2760.598434] ? bprm_execve+0x1a60/0x1a60 [ 2760.598854] __x64_sys_execveat+0xed/0x140 [ 2760.599285] do_syscall_64+0x33/0x40 [ 2760.599665] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2760.600176] RIP: 0033:0x7fde11765b19 [ 2760.600547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.602358] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2760.603107] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2760.603824] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2760.604530] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2760.605242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2760.605950] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:58:05 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:58:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 13:58:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:58:05 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 4) 13:58:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 44) 13:58:05 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) [ 2760.763929] FAULT_INJECTION: forcing a failure. [ 2760.763929] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.765125] CPU: 1 PID: 19651 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2760.765826] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2760.766662] Call Trace: [ 2760.766943] dump_stack+0x107/0x167 [ 2760.767328] should_fail.cold+0x5/0xa [ 2760.767718] ? create_object.isra.0+0x3a/0xa20 [ 2760.768186] should_failslab+0x5/0x20 [ 2760.768576] kmem_cache_alloc+0x5b/0x310 [ 2760.768995] create_object.isra.0+0x3a/0xa20 [ 2760.769444] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2760.769968] __kmalloc+0x16e/0x390 [ 2760.770336] alloc_pipe_info+0x1e5/0x590 [ 2760.770752] splice_direct_to_actor+0x774/0x980 [ 2760.771231] ? _cond_resched+0x12/0x80 [ 2760.771636] ? pipe_to_sendpage+0x380/0x380 [ 2760.772079] ? selinux_file_permission+0x92/0x520 [ 2760.772571] ? do_splice_to+0x160/0x160 [ 2760.772978] ? security_file_permission+0x24e/0x570 [ 2760.773495] do_splice_direct+0x1c4/0x290 [ 2760.773918] ? splice_direct_to_actor+0x980/0x980 [ 2760.774404] ? selinux_file_permission+0x92/0x520 [ 2760.774899] ? security_file_permission+0x24e/0x570 [ 2760.775426] vfs_copy_file_range+0x4f8/0x1290 [ 2760.775896] ? generic_file_rw_checks+0x240/0x240 [ 2760.776391] ? __fget_files+0x296/0x4c0 [ 2760.776810] __do_sys_copy_file_range+0x193/0x420 [ 2760.777311] ? vfs_copy_file_range+0x1290/0x1290 [ 2760.777791] ? ksys_write+0x1a9/0x260 [ 2760.778178] ? __ia32_sys_read+0xb0/0xb0 [ 2760.778596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2760.779128] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2760.779664] do_syscall_64+0x33/0x40 [ 2760.780042] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2760.780563] RIP: 0033:0x7f823ae79b19 [ 2760.780943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.782771] RSP: 002b:00007f82383ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2760.783547] RAX: ffffffffffffffda RBX: 00007f823af8cf60 RCX: 00007f823ae79b19 [ 2760.784270] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2760.784987] RBP: 00007f82383ef1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2760.785700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2760.786423] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 13:58:05 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:58:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 28) 13:58:05 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x8010, &(0x7f00000003c0)=ANY=[@ANYBLOB="004eacec960ffb88f61a07bfc3f3c1aa396415dd0a7f001ad8f12a0550226bd1e28d879881662de6e6455c10101413dd1af65629c18457a48018181c0886b1f44bfb08b4ddf9c7e2fe379d5decb37f7b439736147bf79fe0eb4803c5799422b638a525a1cb52d17f45d89e0200000011cc305f4594564657ec268301004b53e71166a303b4824dd8940676954b9f387670b4913b3d203df2f2bd754e3106bfa1863a6d5647ce2e64799d2b91be7c74dde94e3b520597"]) setxattr$security_selinux(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)='system_u:object_r:autofs_device_t:s0\x00', 0x25, 0x1) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x3) creat(&(0x7f00000000c0)='./file1\x00', 0x144) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc142, 0x8) r2 = openat(r0, &(0x7f0000000140)='./file1\x00', 0x80000, 0x40) write(r2, &(0x7f0000000240)="01", 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r3, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)) write$binfmt_elf64(r3, &(0x7f00000001c0)=ANY=[], 0xfdef) write$P9_RREADLINK(r0, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r0, r1, 0x0, 0x20d315) unlinkat(r3, &(0x7f0000000180)='./file1\x00', 0x0) [ 2760.854994] FAULT_INJECTION: forcing a failure. [ 2760.854994] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.857037] CPU: 0 PID: 19657 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2760.858251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2760.859715] Call Trace: [ 2760.860193] dump_stack+0x107/0x167 [ 2760.860853] should_fail.cold+0x5/0xa [ 2760.861549] should_failslab+0x5/0x20 [ 2760.862231] __kmalloc_track_caller+0x79/0x370 [ 2760.863037] ? bprm_change_interp+0x7c/0xf0 [ 2760.863826] kstrdup+0x36/0x70 [ 2760.864406] bprm_change_interp+0x7c/0xf0 [ 2760.865152] load_misc_binary+0x3a5/0xb70 [ 2760.865916] bprm_execve+0x969/0x1a60 [ 2760.866602] ? open_exec+0x70/0x70 [ 2760.867235] ? memcpy+0x39/0x60 [ 2760.867835] ? copy_string_kernel+0x3b6/0x450 [ 2760.868655] do_execveat_common+0x772/0x8d0 [ 2760.869413] ? bprm_execve+0x1a60/0x1a60 [ 2760.870176] __x64_sys_execveat+0xed/0x140 [ 2760.870927] do_syscall_64+0x33/0x40 [ 2760.871594] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2760.872498] RIP: 0033:0x7fac73041b19 [ 2760.873160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.876375] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2760.877720] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2760.878973] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2760.880251] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2760.881504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2760.882757] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2760.920470] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2760.938267] FAULT_INJECTION: forcing a failure. [ 2760.938267] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.940187] CPU: 0 PID: 19665 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2760.941248] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2760.942514] Call Trace: [ 2760.942930] dump_stack+0x107/0x167 [ 2760.943517] should_fail.cold+0x5/0xa [ 2760.944116] ? create_object.isra.0+0x3a/0xa20 [ 2760.944835] should_failslab+0x5/0x20 [ 2760.945429] kmem_cache_alloc+0x5b/0x310 [ 2760.946073] create_object.isra.0+0x3a/0xa20 [ 2760.946753] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2760.947559] __kmalloc_node+0x1ae/0x420 [ 2760.948200] kvmalloc_node+0x119/0x170 [ 2760.948791] alloc_fdtable+0xd3/0x280 [ 2760.949392] dup_fd+0x74d/0xcf0 [ 2760.949942] unshare_files+0x175/0x270 [ 2760.950553] ? __ia32_sys_unshare+0x40/0x40 [ 2760.951236] ? get_user_pages_remote+0x63/0x90 [ 2760.951947] ? get_user_pages_remote+0x6c/0x90 [ 2760.952670] bprm_execve+0xcb/0x1a60 [ 2760.953254] ? acct_arg_size+0xe0/0xe0 [ 2760.953861] ? downgrade_write+0x3a0/0x3a0 [ 2760.954527] ? open_exec+0x70/0x70 [ 2760.955086] ? memcpy+0x39/0x60 [ 2760.955616] ? copy_string_kernel+0x3b6/0x450 [ 2760.956339] do_execveat_common+0x772/0x8d0 [ 2760.957028] ? bprm_execve+0x1a60/0x1a60 [ 2760.957701] __x64_sys_execveat+0xed/0x140 [ 2760.958377] do_syscall_64+0x33/0x40 [ 2760.958967] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2760.959769] RIP: 0033:0x7fde11765b19 [ 2760.960355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2760.963184] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2760.964369] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2760.965468] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2760.966563] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2760.967666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2760.968774] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2760.975561] audit: type=1400 audit(1708005485.581:535): avc: denied { append } for pid=19659 comm="syz-executor.6" path="/syzkaller-testdir685511379/syzkaller.YGwE6w/368/file0/file0" dev="loop6" ino=18 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:autofs_device_t:s0 tclass=file permissive=1 [ 2760.978594] audit: type=1400 audit(1708005485.582:536): avc: denied { setattr } for pid=19659 comm="syz-executor.6" path="/syzkaller-testdir685511379/syzkaller.YGwE6w/368/file0/file0" dev="loop6" ino=18 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:autofs_device_t:s0 tclass=file permissive=1 [ 2761.030592] audit: type=1400 audit(1708005485.636:537): avc: denied { relabelfrom } for pid=19659 comm="syz-executor.6" name="file0" dev="loop6" ino=18 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:autofs_device_t:s0 tclass=file permissive=1 [ 2761.033680] audit: type=1400 audit(1708005485.639:538): avc: denied { relabelto } for pid=19659 comm="syz-executor.6" name="file0" dev="loop6" ino=18 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:autofs_device_t:s0 tclass=file permissive=1 13:58:19 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 5) [ 2775.260253] FAULT_INJECTION: forcing a failure. [ 2775.260253] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.261466] CPU: 0 PID: 19675 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2775.262193] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.263056] Call Trace: [ 2775.263347] dump_stack+0x107/0x167 [ 2775.263755] should_fail.cold+0x5/0xa [ 2775.264168] ? iter_file_splice_write+0x16d/0xc30 [ 2775.264684] should_failslab+0x5/0x20 [ 2775.265097] __kmalloc+0x72/0x390 [ 2775.265486] iter_file_splice_write+0x16d/0xc30 [ 2775.265987] ? atime_needs_update+0x600/0x600 [ 2775.266459] ? shmem_get_link+0x440/0x440 [ 2775.266934] ? generic_splice_sendpage+0x140/0x140 [ 2775.267458] ? pipe_to_user+0x170/0x170 [ 2775.267889] ? _cond_resched+0x12/0x80 [ 2775.268333] ? lockdep_init_map_type+0x2c7/0x780 [ 2775.268850] ? generic_splice_sendpage+0x140/0x140 [ 2775.269374] direct_splice_actor+0x10f/0x170 [ 2775.269854] splice_direct_to_actor+0x387/0x980 [ 2775.270368] ? pipe_to_sendpage+0x380/0x380 [ 2775.270843] ? do_splice_to+0x160/0x160 [ 2775.271268] ? security_file_permission+0x24e/0x570 [ 2775.271817] do_splice_direct+0x1c4/0x290 [ 2775.272261] ? splice_direct_to_actor+0x980/0x980 [ 2775.272770] ? selinux_file_permission+0x92/0x520 [ 2775.273293] ? security_file_permission+0x24e/0x570 [ 2775.273849] vfs_copy_file_range+0x4f8/0x1290 [ 2775.274344] ? generic_file_rw_checks+0x240/0x240 [ 2775.274871] ? __fget_files+0x296/0x4c0 [ 2775.275332] __do_sys_copy_file_range+0x193/0x420 [ 2775.275860] ? vfs_copy_file_range+0x1290/0x1290 [ 2775.276362] ? ksys_write+0x1a9/0x260 [ 2775.276749] ? __ia32_sys_read+0xb0/0xb0 [ 2775.277194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2775.277747] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2775.278313] do_syscall_64+0x33/0x40 [ 2775.278713] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2775.279250] RIP: 0033:0x7f823ae79b19 [ 2775.279658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.281541] RSP: 002b:00007f82383ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2775.282347] RAX: ffffffffffffffda RBX: 00007f823af8cf60 RCX: 00007f823ae79b19 [ 2775.283090] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2775.283839] RBP: 00007f82383ef1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2775.284580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2775.285324] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 13:58:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 29) 13:58:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000180)={0xe93, 0x1, 0x1}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:58:19 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2200, 0x145) r1 = syz_open_procfs(0x0, &(0x7f0000001680)='net/raw\x00') pread64(r1, &(0x7f00000001c0)=""/115, 0x73, 0x40000000000) fadvise64(r1, 0x4, 0x1, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b12, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(r2, &(0x7f0000000080)={[0x1]}, 0x8, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000040)={0x5000000, 0x7, 0x4e, 0x9, 0x10001}) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) r6 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r6, r6, 0x0) pread64(r6, &(0x7f0000000240)=""/4096, 0x1000, 0x8) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) 13:58:19 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 13:58:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:58:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 45) 13:58:19 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2775.354727] FAULT_INJECTION: forcing a failure. [ 2775.354727] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.356155] CPU: 1 PID: 19682 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2775.356982] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.357973] Call Trace: [ 2775.358304] dump_stack+0x107/0x167 [ 2775.358754] should_fail.cold+0x5/0xa [ 2775.359222] ? kvmalloc_node+0x119/0x170 [ 2775.359727] should_failslab+0x5/0x20 [ 2775.360189] __kmalloc_node+0x76/0x420 [ 2775.360666] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2775.361297] kvmalloc_node+0x119/0x170 [ 2775.361774] alloc_fdtable+0x13f/0x280 [ 2775.362250] dup_fd+0x74d/0xcf0 [ 2775.362667] unshare_files+0x175/0x270 [ 2775.363141] ? __ia32_sys_unshare+0x40/0x40 [ 2775.363677] ? get_user_pages_remote+0x63/0x90 [ 2775.364231] ? get_user_pages_remote+0x6c/0x90 [ 2775.364791] bprm_execve+0xcb/0x1a60 [ 2775.365247] ? acct_arg_size+0xe0/0xe0 [ 2775.365721] ? downgrade_write+0x3a0/0x3a0 [ 2775.366238] ? open_exec+0x70/0x70 [ 2775.366670] ? memcpy+0x39/0x60 [ 2775.367078] ? copy_string_kernel+0x3b6/0x450 [ 2775.367644] do_execveat_common+0x772/0x8d0 [ 2775.368170] ? bprm_execve+0x1a60/0x1a60 [ 2775.368677] __x64_sys_execveat+0xed/0x140 [ 2775.369199] do_syscall_64+0x33/0x40 [ 2775.369650] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2775.370277] RIP: 0033:0x7fde11765b19 [ 2775.370732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.372932] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2775.373855] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2775.374714] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2775.375577] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.376434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.377293] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2775.381983] FAULT_INJECTION: forcing a failure. [ 2775.381983] name failslab, interval 1, probability 0, space 0, times 0 [ 2775.383358] CPU: 1 PID: 19688 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2775.384200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2775.385210] Call Trace: [ 2775.385560] dump_stack+0x107/0x167 [ 2775.386012] should_fail.cold+0x5/0xa [ 2775.386474] ? __alloc_file+0x21/0x320 [ 2775.386950] ? __alloc_file+0x21/0x320 [ 2775.387422] should_failslab+0x5/0x20 [ 2775.387896] kmem_cache_alloc+0x5b/0x310 [ 2775.388398] __alloc_file+0x21/0x320 [ 2775.388854] alloc_empty_file+0x6d/0x170 [ 2775.389351] path_openat+0xe3/0x26e0 [ 2775.389807] ? lock_acquire+0x197/0x470 [ 2775.390295] ? path_lookupat+0x860/0x860 [ 2775.390806] do_filp_open+0x190/0x3e0 [ 2775.391267] ? may_open_dev+0xf0/0xf0 [ 2775.391740] ? lock_chain_count+0x20/0x20 [ 2775.392246] ? __lockdep_reset_lock+0x180/0x180 [ 2775.392808] ? lock_acquire+0x197/0x470 [ 2775.393300] ? lock_release+0x680/0x680 [ 2775.393779] ? find_held_lock+0x2c/0x110 [ 2775.394280] ? kmem_cache_alloc+0x159/0x310 [ 2775.394810] ? mark_held_locks+0x9e/0xe0 [ 2775.395310] do_open_execat+0x116/0x690 [ 2775.395805] ? trace_hardirqs_on+0x5b/0x180 [ 2775.396331] ? __do_sys_uselib+0x5e0/0x5e0 [ 2775.396853] ? memcpy+0x39/0x60 [ 2775.397268] open_exec+0x42/0x70 [ 2775.397682] load_misc_binary+0x973/0xb70 [ 2775.398195] bprm_execve+0x969/0x1a60 [ 2775.398667] ? open_exec+0x70/0x70 [ 2775.399109] ? memcpy+0x39/0x60 [ 2775.399523] ? copy_string_kernel+0x3b6/0x450 [ 2775.400076] do_execveat_common+0x772/0x8d0 [ 2775.400603] ? bprm_execve+0x1a60/0x1a60 [ 2775.401116] __x64_sys_execveat+0xed/0x140 [ 2775.401640] do_syscall_64+0x33/0x40 [ 2775.402094] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2775.402717] RIP: 0033:0x7fac73041b19 [ 2775.403169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2775.405377] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2775.406290] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2775.407145] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2775.408015] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2775.408867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2775.409738] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:58:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:58:35 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0) 13:58:35 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:58:35 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) statx(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x100, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x38) lstat(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={r2, 0x5, 0x8, 0x3}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@loose}, {@version_u}, {@dfltgid={'dfltgid', 0x3d, r3}}, {@version_9p2000}], [{@fowner_eq}, {@dont_hash}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@measure}, {@smackfshat={'smackfshat', 0x3d, '\',\'A'}}, {@seclabel}, {@pcr={'pcr', 0x3d, 0x33}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@appraise}]}}) setfsgid(r3) fchownat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', r1, r3, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x280, 0x18, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @nested={0x4, 0x8}, @generic="8c60246c8016fe59bb9a5ca31837b0ff39889fa76048f37b05886f7264ba1a1e509ca63ae5e5dd685972619b893f2aab03989345fa1ca4eb16d87530009908e85b952970a94c696b9f143e7849eca9b5bbf189971e8517d062f76b71ecbb31112dcf5c5a6f81912435653b6b65e971bf855099f3f6dadfb77c3397d89aedf96f15414f40f1a473986f68995961b3ac43f8f83c0741d16641bc33c80d5026c64515c4e7cf8cb06a45073f96f3fd26b6cb8c03f1dabfead0ef5110435cd8cd798e9a1e813b803fd4519389d4fcaa870960647d9176f360175b9c76acec3a0ae79b886637b53b645cbd0cc61953d1f19a747d5c40d45d6acb709292b8ecf39fbbf04b4a7f594dc740f119ed903ea12ba7ce7c9bb198b756b1cd9b4b52be252e816cab35e8ba64c07e2779183231dc0d3f803da6cf8eeac4f86c1ad40d393a8f3d4f65ce6ef3c39e3b3e7423cd787903e0c9074faada58dcdb57e5f3cfa32e00926824332eec0b68", @nested={0xf0, 0x8a, 0x0, 0x1, [@generic="70a49651f97dc985552b0b32d41158f1d22d52a3c5f9b57f82766d6ca499337d", @generic="163514bfd447644ae9c521c0148b0758df3677c40e7d82e7aadc7f733484f22ddbe18ebaf99e1667bf2050d63b026b36ce0b0dd07ee51ccfe31cc508a74b17d46f117f8b42250427e988c44f375e279173f4991727dd6ce42fb4b29b74a4a5a84b0af87b4e3f6d660900abe7f2f888e94eda8920a3a2972f13ffdd65db35dd36c7c24cbec8c7a29ef876d2bd20985fee6df4d953e3b16d6525fbf4bf68cd87ad3b21030f195b950665ad7b1a36acfe6501ee634107a003a791624fe971a90e7aec280306", @typed={0x8, 0x2e, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @typed={0x8, 0x4a, 0x0, 0x0, @pid}]}, 0x280}}, 0x0) 13:58:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:58:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:58:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 30) 13:58:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 46) 13:58:35 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 6) [ 2791.035699] FAULT_INJECTION: forcing a failure. [ 2791.035699] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.037464] CPU: 0 PID: 19708 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2791.038433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.039586] Call Trace: [ 2791.039984] dump_stack+0x107/0x167 [ 2791.040509] should_fail.cold+0x5/0xa [ 2791.041058] ? create_object.isra.0+0x3a/0xa20 [ 2791.041708] should_failslab+0x5/0x20 [ 2791.042246] kmem_cache_alloc+0x5b/0x310 [ 2791.042833] create_object.isra.0+0x3a/0xa20 [ 2791.043456] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2791.044135] netlink: 608 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2791.044190] __kmalloc+0x16e/0x390 [ 2791.045963] iter_file_splice_write+0x16d/0xc30 [ 2791.046665] ? atime_needs_update+0x600/0x600 [ 2791.046955] FAULT_INJECTION: forcing a failure. [ 2791.046955] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.047344] ? shmem_get_link+0x440/0x440 [ 2791.047397] ? generic_splice_sendpage+0x140/0x140 [ 2791.050316] ? pipe_to_user+0x170/0x170 [ 2791.050921] ? _cond_resched+0x5d/0x80 [ 2791.051543] ? lockdep_init_map_type+0x2c7/0x780 [ 2791.052299] ? generic_splice_sendpage+0x140/0x140 [ 2791.053049] direct_splice_actor+0x10f/0x170 [ 2791.053739] splice_direct_to_actor+0x387/0x980 [ 2791.054459] ? pipe_to_sendpage+0x380/0x380 [ 2791.055137] ? do_splice_to+0x160/0x160 [ 2791.055757] ? security_file_permission+0x24e/0x570 [ 2791.056552] do_splice_direct+0x1c4/0x290 [ 2791.057187] ? splice_direct_to_actor+0x980/0x980 [ 2791.057922] ? selinux_file_permission+0x92/0x520 [ 2791.058668] ? security_file_permission+0x24e/0x570 [ 2791.059460] vfs_copy_file_range+0x4f8/0x1290 [ 2791.060171] ? generic_file_rw_checks+0x240/0x240 [ 2791.060913] ? __fget_files+0x296/0x4c0 [ 2791.061565] __do_sys_copy_file_range+0x193/0x420 [ 2791.062314] ? vfs_copy_file_range+0x1290/0x1290 [ 2791.063046] ? ksys_write+0x1a9/0x260 [ 2791.063628] ? __ia32_sys_read+0xb0/0xb0 [ 2791.064274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2791.065066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2791.065882] do_syscall_64+0x33/0x40 [ 2791.066452] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.067241] RIP: 0033:0x7f823ae79b19 [ 2791.067852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.070638] RSP: 002b:00007f82383ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2791.071790] RAX: ffffffffffffffda RBX: 00007f823af8cf60 RCX: 00007f823ae79b19 [ 2791.072856] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2791.073928] RBP: 00007f82383ef1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2791.074998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.076072] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 [ 2791.077201] CPU: 1 PID: 19706 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2791.078220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.079415] Call Trace: [ 2791.079812] dump_stack+0x107/0x167 [ 2791.080351] should_fail.cold+0x5/0xa [ 2791.080910] ? create_object.isra.0+0x3a/0xa20 [ 2791.081577] should_failslab+0x5/0x20 [ 2791.082137] kmem_cache_alloc+0x5b/0x310 [ 2791.082744] create_object.isra.0+0x3a/0xa20 [ 2791.083392] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2791.084138] __kmalloc_node+0x1ae/0x420 [ 2791.084753] kvmalloc_node+0x119/0x170 [ 2791.085321] alloc_fdtable+0x13f/0x280 [ 2791.085923] dup_fd+0x74d/0xcf0 [ 2791.086433] unshare_files+0x175/0x270 [ 2791.087034] ? __ia32_sys_unshare+0x40/0x40 [ 2791.087666] ? get_user_pages_remote+0x63/0x90 [ 2791.088375] ? get_user_pages_remote+0x6c/0x90 [ 2791.089052] bprm_execve+0xcb/0x1a60 [ 2791.089620] ? acct_arg_size+0xe0/0xe0 [ 2791.090193] ? downgrade_write+0x3a0/0x3a0 [ 2791.090839] ? open_exec+0x70/0x70 [ 2791.091369] ? memcpy+0x39/0x60 [ 2791.091985] ? copy_string_kernel+0x3b6/0x450 [ 2791.092836] do_execveat_common+0x772/0x8d0 [ 2791.093597] ? bprm_execve+0x1a60/0x1a60 [ 2791.094240] __x64_sys_execveat+0xed/0x140 [ 2791.094918] do_syscall_64+0x33/0x40 [ 2791.095470] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.096285] RIP: 0033:0x7fde11765b19 [ 2791.096852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.099682] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2791.100785] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2791.101812] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2791.102837] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.103873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.104903] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2791.114805] FAULT_INJECTION: forcing a failure. [ 2791.114805] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.116482] CPU: 1 PID: 19709 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2791.117466] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.118653] Call Trace: [ 2791.119042] dump_stack+0x107/0x167 [ 2791.119614] should_fail.cold+0x5/0xa [ 2791.120186] ? create_object.isra.0+0x3a/0xa20 [ 2791.120900] should_failslab+0x5/0x20 [ 2791.121458] kmem_cache_alloc+0x5b/0x310 [ 2791.122100] create_object.isra.0+0x3a/0xa20 [ 2791.122791] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2791.123586] kmem_cache_alloc+0x159/0x310 [ 2791.124248] __alloc_file+0x21/0x320 [ 2791.124843] alloc_empty_file+0x6d/0x170 [ 2791.125480] path_openat+0xe3/0x26e0 [ 2791.126063] ? lock_acquire+0x197/0x470 [ 2791.126687] ? path_lookupat+0x860/0x860 [ 2791.127345] do_filp_open+0x190/0x3e0 [ 2791.127939] ? may_open_dev+0xf0/0xf0 [ 2791.128532] ? lock_chain_count+0x20/0x20 [ 2791.129175] ? __lockdep_reset_lock+0x180/0x180 [ 2791.129891] ? lock_acquire+0x197/0x470 [ 2791.130518] ? lock_release+0x680/0x680 [ 2791.131131] ? find_held_lock+0x2c/0x110 [ 2791.131773] ? kmem_cache_alloc+0x159/0x310 [ 2791.132450] ? mark_held_locks+0x9e/0xe0 [ 2791.133087] do_open_execat+0x116/0x690 [ 2791.133700] ? trace_hardirqs_on+0x5b/0x180 [ 2791.134367] ? __do_sys_uselib+0x5e0/0x5e0 [ 2791.135032] ? memcpy+0x39/0x60 [ 2791.135555] open_exec+0x42/0x70 [ 2791.136093] load_misc_binary+0x973/0xb70 [ 2791.136996] bprm_execve+0x969/0x1a60 [ 2791.137596] ? open_exec+0x70/0x70 [ 2791.138143] ? memcpy+0x39/0x60 [ 2791.138656] ? copy_string_kernel+0x3b6/0x450 [ 2791.139543] do_execveat_common+0x772/0x8d0 [ 2791.140269] ? bprm_execve+0x1a60/0x1a60 [ 2791.140919] __x64_sys_execveat+0xed/0x140 [ 2791.141578] do_syscall_64+0x33/0x40 [ 2791.142150] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.142929] RIP: 0033:0x7fac73041b19 [ 2791.143501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.146334] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2791.147504] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2791.148702] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2791.149906] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.151088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.152285] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:58:35 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 1) 13:58:35 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2791.211310] FAULT_INJECTION: forcing a failure. [ 2791.211310] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.213247] CPU: 1 PID: 19716 Comm: syz-executor.1 Not tainted 5.10.209 #1 [ 2791.214256] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.215448] Call Trace: 13:58:35 executing program 6: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext, 0x1000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="130000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000250e8251001000"/92]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0) fallocate(r3, 0x10, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x5, @remote, 0x4}, 0x1c) dup2(r2, 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x2241) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r6, 0xc) fcntl$dupfd(r7, 0x406, r6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) 13:58:35 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2791.215854] dump_stack+0x107/0x167 [ 2791.216617] should_fail.cold+0x5/0xa [ 2791.217159] ? alloc_pipe_info+0x10a/0x590 [ 2791.217764] should_failslab+0x5/0x20 [ 2791.218313] kmem_cache_alloc_trace+0x55/0x320 [ 2791.218975] alloc_pipe_info+0x10a/0x590 [ 2791.219565] splice_direct_to_actor+0x774/0x980 [ 2791.220230] ? _cond_resched+0x12/0x80 [ 2791.220791] ? pipe_to_sendpage+0x380/0x380 [ 2791.221409] ? selinux_file_permission+0x92/0x520 [ 2791.222089] ? do_splice_to+0x160/0x160 [ 2791.222663] ? security_file_permission+0x24e/0x570 [ 2791.223402] do_splice_direct+0x1c4/0x290 [ 2791.224011] ? splice_direct_to_actor+0x980/0x980 [ 2791.224733] ? selinux_file_permission+0x92/0x520 [ 2791.225436] ? security_file_permission+0x24e/0x570 [ 2791.226207] vfs_copy_file_range+0x4f8/0x1290 [ 2791.226865] ? generic_file_rw_checks+0x240/0x240 [ 2791.227601] ? __fget_files+0x296/0x4c0 [ 2791.228213] __do_sys_copy_file_range+0x193/0x420 [ 2791.228944] ? vfs_copy_file_range+0x1290/0x1290 [ 2791.229623] ? ksys_write+0x1a9/0x260 [ 2791.230176] ? __ia32_sys_read+0xb0/0xb0 [ 2791.230776] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2791.231531] ? syscall_enter_from_user_mode+0x1d/0x50 13:58:35 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2791.232297] do_syscall_64+0x33/0x40 [ 2791.232965] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.233748] RIP: 0033:0x7fa33218bb19 [ 2791.234288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.236903] RSP: 002b:00007fa32f701188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2791.237997] RAX: ffffffffffffffda RBX: 00007fa33229ef60 RCX: 00007fa33218bb19 [ 2791.239014] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2791.240041] RBP: 00007fa32f7011d0 R08: 0000000300000000 R09: 0000000000000000 [ 2791.241059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.242072] R13: 00007fff050e795f R14: 00007fa32f701300 R15: 0000000000022000 [ 2791.308389] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 13:58:35 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 7) [ 2791.360420] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies. Check SNMP counters. 13:58:35 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 47) 13:58:35 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 31) 13:58:35 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:58:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x5, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2791.410823] FAULT_INJECTION: forcing a failure. [ 2791.410823] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.412638] CPU: 0 PID: 19728 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2791.413708] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.414992] Call Trace: [ 2791.415415] dump_stack+0x107/0x167 [ 2791.416007] should_fail.cold+0x5/0xa [ 2791.416602] ? prepare_creds+0x25/0x5e0 [ 2791.417225] ? prepare_creds+0x25/0x5e0 [ 2791.417823] should_failslab+0x5/0x20 [ 2791.418414] kmem_cache_alloc+0x5b/0x310 [ 2791.419027] ? __ia32_sys_unshare+0x40/0x40 [ 2791.419722] prepare_creds+0x25/0x5e0 [ 2791.420327] prepare_exec_creds+0xd/0x260 [ 2791.420979] bprm_execve+0x18f/0x1a60 [ 2791.421581] ? acct_arg_size+0xe0/0xe0 [ 2791.422192] ? downgrade_write+0x3a0/0x3a0 [ 2791.422865] ? open_exec+0x70/0x70 [ 2791.423406] ? memcpy+0x39/0x60 [ 2791.423934] ? copy_string_kernel+0x3b6/0x450 [ 2791.424656] do_execveat_common+0x772/0x8d0 [ 2791.425344] ? bprm_execve+0x1a60/0x1a60 [ 2791.425991] __x64_sys_execveat+0xed/0x140 [ 2791.426670] do_syscall_64+0x33/0x40 [ 2791.427251] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.428055] RIP: 0033:0x7fde11765b19 [ 2791.428638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.431460] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2791.432656] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2791.433765] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2791.434868] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.435973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.437069] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2791.440432] FAULT_INJECTION: forcing a failure. [ 2791.440432] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.442286] CPU: 1 PID: 19733 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2791.442454] FAULT_INJECTION: forcing a failure. [ 2791.442454] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.443314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.443324] Call Trace: [ 2791.443351] dump_stack+0x107/0x167 [ 2791.443392] should_fail.cold+0x5/0xa [ 2791.447763] ? security_file_alloc+0x34/0x170 [ 2791.448443] should_failslab+0x5/0x20 [ 2791.449015] kmem_cache_alloc+0x5b/0x310 [ 2791.449633] security_file_alloc+0x34/0x170 [ 2791.450285] __alloc_file+0xb7/0x320 [ 2791.450848] alloc_empty_file+0x6d/0x170 [ 2791.451459] path_openat+0xe3/0x26e0 [ 2791.452036] ? lock_acquire+0x197/0x470 [ 2791.452643] ? path_lookupat+0x860/0x860 [ 2791.453278] do_filp_open+0x190/0x3e0 [ 2791.453847] ? may_open_dev+0xf0/0xf0 [ 2791.454420] ? lock_chain_count+0x20/0x20 [ 2791.455045] ? __lockdep_reset_lock+0x180/0x180 [ 2791.455748] ? lock_acquire+0x197/0x470 [ 2791.456353] ? lock_release+0x680/0x680 [ 2791.456945] ? find_held_lock+0x2c/0x110 [ 2791.457561] ? kmem_cache_alloc+0x159/0x310 [ 2791.458215] ? mark_held_locks+0x9e/0xe0 [ 2791.458828] do_open_execat+0x116/0x690 [ 2791.459430] ? trace_hardirqs_on+0x5b/0x180 [ 2791.460089] ? __do_sys_uselib+0x5e0/0x5e0 [ 2791.460730] ? memcpy+0x39/0x60 [ 2791.461238] open_exec+0x42/0x70 [ 2791.461736] load_misc_binary+0x973/0xb70 [ 2791.462377] bprm_execve+0x969/0x1a60 [ 2791.462961] ? open_exec+0x70/0x70 [ 2791.463501] ? memcpy+0x39/0x60 [ 2791.464000] ? copy_string_kernel+0x3b6/0x450 [ 2791.464687] do_execveat_common+0x772/0x8d0 [ 2791.465318] ? bprm_execve+0x1a60/0x1a60 [ 2791.465957] __x64_sys_execveat+0xed/0x140 [ 2791.466602] do_syscall_64+0x33/0x40 [ 2791.467145] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.467924] RIP: 0033:0x7fac73041b19 [ 2791.468483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.471198] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2791.472341] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2791.473393] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2791.474451] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.475514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.476645] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2791.477701] CPU: 0 PID: 19732 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2791.478777] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.480035] Call Trace: [ 2791.480441] dump_stack+0x107/0x167 [ 2791.480993] should_fail.cold+0x5/0xa [ 2791.481580] ? iter_file_splice_write+0x16d/0xc30 [ 2791.482300] should_failslab+0x5/0x20 [ 2791.482886] __kmalloc+0x72/0x390 [ 2791.483427] iter_file_splice_write+0x16d/0xc30 [ 2791.484134] ? atime_needs_update+0x600/0x600 [ 2791.484796] ? shmem_get_link+0x440/0x440 [ 2791.485447] ? generic_splice_sendpage+0x140/0x140 [ 2791.486170] ? pipe_to_user+0x170/0x170 [ 2791.486768] ? _cond_resched+0x12/0x80 [ 2791.487401] ? lockdep_init_map_type+0x2c7/0x780 [ 2791.488137] ? generic_splice_sendpage+0x140/0x140 [ 2791.488881] direct_splice_actor+0x10f/0x170 [ 2791.489554] splice_direct_to_actor+0x387/0x980 [ 2791.490283] ? pipe_to_sendpage+0x380/0x380 [ 2791.490934] ? do_splice_to+0x160/0x160 [ 2791.491533] ? security_file_permission+0x24e/0x570 [ 2791.492327] do_splice_direct+0x1c4/0x290 [ 2791.492958] ? splice_direct_to_actor+0x980/0x980 [ 2791.493677] ? selinux_file_permission+0x92/0x520 [ 2791.494422] ? security_file_permission+0x24e/0x570 [ 2791.495217] vfs_copy_file_range+0x4f8/0x1290 [ 2791.495920] ? generic_file_rw_checks+0x240/0x240 [ 2791.496664] ? __fget_files+0x296/0x4c0 [ 2791.497305] __do_sys_copy_file_range+0x193/0x420 [ 2791.498058] ? vfs_copy_file_range+0x1290/0x1290 [ 2791.498778] ? ksys_write+0x1a9/0x260 [ 2791.499368] ? __ia32_sys_read+0xb0/0xb0 [ 2791.500034] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2791.500835] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2791.501642] do_syscall_64+0x33/0x40 [ 2791.502241] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.503006] RIP: 0033:0x7f823ae79b19 [ 2791.503571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.506315] RSP: 002b:00007f82383ef188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2791.507449] RAX: ffffffffffffffda RBX: 00007f823af8cf60 RCX: 00007f823ae79b19 [ 2791.508521] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2791.509585] RBP: 00007f82383ef1d0 R08: 0000000300000000 R09: 0000000000000000 [ 2791.510655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.511736] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 13:58:36 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:58:36 executing program 6: ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x2, [@local, @private]}, 0x18) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000100)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) setgroups(0x4000000000000356, &(0x7f0000000380)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="efa29ddddd00a584478fe7c466b381ca", 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1789}}, './file0\x00'}) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x40084, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) getgroups(0x1, &(0x7f0000000080)=[0xffffffffffffffff]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x24, 0x878c5bf8df414e27}, 0x14}}, 0x0) ftruncate(0xffffffffffffffff, 0x5) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000440)) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x8) epoll_create1(0x80000) dup2(0xffffffffffffffff, 0xffffffffffffffff) 13:58:36 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:58:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 32) 13:58:36 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 2) [ 2791.699767] FAULT_INJECTION: forcing a failure. [ 2791.699767] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.701314] CPU: 0 PID: 19747 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2791.702190] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.703178] Call Trace: [ 2791.703510] dump_stack+0x107/0x167 [ 2791.703996] should_fail.cold+0x5/0xa [ 2791.704492] ? create_object.isra.0+0x3a/0xa20 [ 2791.705086] should_failslab+0x5/0x20 [ 2791.705575] kmem_cache_alloc+0x5b/0x310 [ 2791.706087] create_object.isra.0+0x3a/0xa20 [ 2791.706652] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2791.707281] kmem_cache_alloc+0x159/0x310 [ 2791.707835] prepare_creds+0x25/0x5e0 [ 2791.708305] prepare_exec_creds+0xd/0x260 [ 2791.708839] bprm_execve+0x18f/0x1a60 [ 2791.709308] ? acct_arg_size+0xe0/0xe0 [ 2791.709807] ? downgrade_write+0x3a0/0x3a0 [ 2791.710346] ? open_exec+0x70/0x70 [ 2791.710805] ? memcpy+0x39/0x60 [ 2791.711215] ? copy_string_kernel+0x3b6/0x450 [ 2791.711812] do_execveat_common+0x772/0x8d0 [ 2791.712349] ? bprm_execve+0x1a60/0x1a60 [ 2791.712907] __x64_sys_execveat+0xed/0x140 [ 2791.713435] do_syscall_64+0x33/0x40 [ 2791.713914] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.714064] FAULT_INJECTION: forcing a failure. [ 2791.714064] name failslab, interval 1, probability 0, space 0, times 0 [ 2791.714529] RIP: 0033:0x7fde11765b19 [ 2791.714546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.714565] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2791.719863] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2791.720770] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2791.721677] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2791.722582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2791.723495] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2791.724461] CPU: 1 PID: 19748 Comm: syz-executor.1 Not tainted 5.10.209 #1 [ 2791.725471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2791.726670] Call Trace: [ 2791.727070] dump_stack+0x107/0x167 [ 2791.727618] should_fail.cold+0x5/0xa [ 2791.728194] ? create_object.isra.0+0x3a/0xa20 [ 2791.728867] should_failslab+0x5/0x20 [ 2791.729424] kmem_cache_alloc+0x5b/0x310 [ 2791.730021] create_object.isra.0+0x3a/0xa20 [ 2791.730659] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2791.731392] kmem_cache_alloc_trace+0x151/0x320 [ 2791.732084] alloc_pipe_info+0x10a/0x590 [ 2791.732685] splice_direct_to_actor+0x774/0x980 [ 2791.733351] ? _cond_resched+0x12/0x80 [ 2791.733922] ? pipe_to_sendpage+0x380/0x380 [ 2791.734546] ? selinux_file_permission+0x92/0x520 [ 2791.735245] ? do_splice_to+0x160/0x160 [ 2791.735826] ? security_file_permission+0x24e/0x570 [ 2791.736562] do_splice_direct+0x1c4/0x290 [ 2791.737164] ? splice_direct_to_actor+0x980/0x980 [ 2791.737841] ? selinux_file_permission+0x92/0x520 [ 2791.738550] ? security_file_permission+0x24e/0x570 [ 2791.739276] vfs_copy_file_range+0x4f8/0x1290 [ 2791.739946] ? generic_file_rw_checks+0x240/0x240 [ 2791.740648] ? __fget_files+0x296/0x4c0 [ 2791.741239] __do_sys_copy_file_range+0x193/0x420 [ 2791.741944] ? vfs_copy_file_range+0x1290/0x1290 [ 2791.742626] ? ksys_write+0x1a9/0x260 [ 2791.743173] ? __ia32_sys_read+0xb0/0xb0 [ 2791.743779] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2791.744536] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2791.745274] do_syscall_64+0x33/0x40 [ 2791.745816] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2791.746557] RIP: 0033:0x7fa33218bb19 [ 2791.747089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2791.749715] RSP: 002b:00007fa32f701188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2791.750807] RAX: ffffffffffffffda RBX: 00007fa33229ef60 RCX: 00007fa33218bb19 [ 2791.751832] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2791.752853] RBP: 00007fa32f7011d0 R08: 0000000300000000 R09: 0000000000000000 [ 2791.753873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2791.754891] R13: 00007fff050e795f R14: 00007fa32f701300 R15: 0000000000022000 13:58:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 48) 13:58:51 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:58:51 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 3) 13:58:51 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:58:51 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:58:51 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 8) 13:58:51 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r1, &(0x7f0000000140)="ee", 0x1, 0x800000}]) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x11, r1, 0x0) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0xfffffffc, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r4}}, 0x1) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r5, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r6 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6003, @fd_index=0xfffffffc, 0xa075, 0x0, 0x0, 0x2, 0x1, {0x0, r7}}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000001900)="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", 0x1000, 0x8000, 0x0, {0x0, r7}}, 0xfffff792) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/236) 13:58:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 33) [ 2807.208050] FAULT_INJECTION: forcing a failure. [ 2807.208050] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.210169] CPU: 0 PID: 19757 Comm: syz-executor.1 Not tainted 5.10.209 #1 [ 2807.211440] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.212969] Call Trace: [ 2807.213471] dump_stack+0x107/0x167 [ 2807.214167] should_fail.cold+0x5/0xa [ 2807.214885] ? alloc_pipe_info+0x1e5/0x590 [ 2807.215683] should_failslab+0x5/0x20 [ 2807.216404] __kmalloc+0x72/0x390 [ 2807.217059] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2807.218018] alloc_pipe_info+0x1e5/0x590 [ 2807.218772] splice_direct_to_actor+0x774/0x980 [ 2807.219642] ? _cond_resched+0x12/0x80 [ 2807.220393] ? pipe_to_sendpage+0x380/0x380 [ 2807.221201] ? selinux_file_permission+0x92/0x520 [ 2807.222106] ? do_splice_to+0x160/0x160 [ 2807.222847] ? security_file_permission+0x24e/0x570 [ 2807.223800] do_splice_direct+0x1c4/0x290 [ 2807.224589] ? splice_direct_to_actor+0x980/0x980 [ 2807.225479] ? selinux_file_permission+0x92/0x520 [ 2807.226389] ? security_file_permission+0x24e/0x570 [ 2807.227325] vfs_copy_file_range+0x4f8/0x1290 [ 2807.228189] ? generic_file_rw_checks+0x240/0x240 [ 2807.229103] ? __fget_files+0x296/0x4c0 [ 2807.229859] __do_sys_copy_file_range+0x193/0x420 [ 2807.230762] ? vfs_copy_file_range+0x1290/0x1290 [ 2807.231628] ? ksys_write+0x1a9/0x260 [ 2807.232343] ? __ia32_sys_read+0xb0/0xb0 [ 2807.233105] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.234068] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.235027] do_syscall_64+0x33/0x40 [ 2807.235718] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2807.236670] RIP: 0033:0x7fa33218bb19 [ 2807.237355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.240678] RSP: 002b:00007fa32f701188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2807.242076] RAX: ffffffffffffffda RBX: 00007fa33229ef60 RCX: 00007fa33218bb19 [ 2807.243374] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2807.244678] RBP: 00007fa32f7011d0 R08: 0000000300000000 R09: 0000000000000000 [ 2807.245977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2807.247278] R13: 00007fff050e795f R14: 00007fa32f701300 R15: 0000000000022000 [ 2807.260867] FAULT_INJECTION: forcing a failure. [ 2807.260867] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.262794] CPU: 1 PID: 19762 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2807.263988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.265263] Call Trace: [ 2807.265684] dump_stack+0x107/0x167 [ 2807.265784] FAULT_INJECTION: forcing a failure. [ 2807.265784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2807.266257] should_fail.cold+0x5/0xa [ 2807.266282] ? create_object.isra.0+0x3a/0xa20 [ 2807.266307] should_failslab+0x5/0x20 [ 2807.266327] kmem_cache_alloc+0x5b/0x310 [ 2807.266349] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2807.266376] create_object.isra.0+0x3a/0xa20 [ 2807.266398] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2807.273385] kmem_cache_alloc+0x159/0x310 [ 2807.274053] security_file_alloc+0x34/0x170 [ 2807.274736] __alloc_file+0xb7/0x320 [ 2807.275327] alloc_empty_file+0x6d/0x170 [ 2807.275982] path_openat+0xe3/0x26e0 [ 2807.276581] ? lock_acquire+0x197/0x470 [ 2807.277216] ? path_lookupat+0x860/0x860 [ 2807.277879] do_filp_open+0x190/0x3e0 [ 2807.278478] ? may_open_dev+0xf0/0xf0 [ 2807.279086] ? lock_chain_count+0x20/0x20 [ 2807.279737] ? __lockdep_reset_lock+0x180/0x180 [ 2807.280472] ? lock_acquire+0x197/0x470 [ 2807.281108] ? lock_release+0x680/0x680 [ 2807.281731] ? find_held_lock+0x2c/0x110 [ 2807.282373] ? kmem_cache_alloc+0x159/0x310 [ 2807.283002] ? mark_held_locks+0x9e/0xe0 [ 2807.283635] do_open_execat+0x116/0x690 [ 2807.284267] ? trace_hardirqs_on+0x5b/0x180 [ 2807.284948] ? __do_sys_uselib+0x5e0/0x5e0 [ 2807.285621] ? memcpy+0x39/0x60 [ 2807.286155] open_exec+0x42/0x70 [ 2807.286695] load_misc_binary+0x973/0xb70 [ 2807.287370] bprm_execve+0x969/0x1a60 [ 2807.287992] ? open_exec+0x70/0x70 [ 2807.288563] ? memcpy+0x39/0x60 [ 2807.289088] ? copy_string_kernel+0x3b6/0x450 [ 2807.289819] do_execveat_common+0x772/0x8d0 [ 2807.290487] ? bprm_execve+0x1a60/0x1a60 [ 2807.291099] __x64_sys_execveat+0xed/0x140 [ 2807.291771] do_syscall_64+0x33/0x40 [ 2807.292372] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2807.293176] RIP: 0033:0x7fac73041b19 [ 2807.293728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.296554] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2807.297764] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2807.298884] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2807.300029] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.301190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.302332] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2807.303500] CPU: 0 PID: 19766 Comm: syz-executor.2 Not tainted 5.10.209 #1 [ 2807.304747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.306463] Call Trace: [ 2807.306943] dump_stack+0x107/0x167 [ 2807.307613] should_fail.cold+0x5/0xa [ 2807.308315] _copy_from_user+0x2e/0x1b0 [ 2807.309039] kstrtouint_from_user+0xbd/0x220 [ 2807.309837] ? kstrtou8_from_user+0x210/0x210 [ 2807.310663] ? lock_acquire+0x197/0x470 [ 2807.311379] ? ksys_write+0x12d/0x260 [ 2807.312102] proc_fail_nth_write+0x78/0x220 [ 2807.312853] ? proc_task_getattr+0x1f0/0x1f0 [ 2807.313631] ? __fget_files+0x296/0x4c0 [ 2807.314351] ? proc_task_getattr+0x1f0/0x1f0 [ 2807.315134] vfs_write+0x29a/0xa70 [ 2807.315773] ksys_write+0x12d/0x260 [ 2807.316436] ? __ia32_sys_read+0xb0/0xb0 [ 2807.317140] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.318077] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.319008] do_syscall_64+0x33/0x40 [ 2807.319669] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2807.320542] RIP: 0033:0x7f823ae2c5ff [ 2807.321201] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2807.324359] RSP: 002b:00007f82383ef170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2807.325698] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f823ae2c5ff [ 2807.326942] RDX: 0000000000000001 RSI: 00007f82383ef1e0 RDI: 0000000000000006 [ 2807.328167] RBP: 00007f82383ef1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.329385] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2807.330634] R13: 00007ffe5b24f49f R14: 00007f82383ef300 R15: 0000000000022000 [ 2807.343172] FAULT_INJECTION: forcing a failure. [ 2807.343172] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.345382] CPU: 0 PID: 19760 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2807.346608] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.348067] Call Trace: [ 2807.348543] dump_stack+0x107/0x167 [ 2807.349207] should_fail.cold+0x5/0xa [ 2807.349890] ? security_prepare_creds+0x112/0x190 [ 2807.350751] should_failslab+0x5/0x20 [ 2807.351423] __kmalloc+0x72/0x390 [ 2807.352075] security_prepare_creds+0x112/0x190 [ 2807.352913] prepare_creds+0x452/0x5e0 [ 2807.353622] prepare_exec_creds+0xd/0x260 [ 2807.354352] bprm_execve+0x18f/0x1a60 [ 2807.355062] ? acct_arg_size+0xe0/0xe0 [ 2807.355770] ? downgrade_write+0x3a0/0x3a0 [ 2807.356566] ? open_exec+0x70/0x70 [ 2807.357213] ? memcpy+0x39/0x60 [ 2807.357814] ? copy_string_kernel+0x3b6/0x450 [ 2807.358632] do_execveat_common+0x772/0x8d0 [ 2807.359421] ? bprm_execve+0x1a60/0x1a60 [ 2807.360189] __x64_sys_execveat+0xed/0x140 [ 2807.360966] do_syscall_64+0x33/0x40 [ 2807.361640] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2807.362551] RIP: 0033:0x7fde11765b19 [ 2807.363222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.366494] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2807.367853] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2807.369137] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2807.370422] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2807.371708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2807.372997] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:58:51 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:58:52 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:58:52 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:58:52 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 4) 13:58:52 executing program 6: ftruncate(0xffffffffffffffff, 0x1000003) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') read(r1, &(0x7f00000002c0)=""/225, 0xe1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r0, r0) write$binfmt_elf64(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x3c7) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x4a6c80) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') dup2(0xffffffffffffffff, r4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r1, r2, r3, r0, r4, 0xffffffffffffffff, r5, r0], 0x8) fcntl$addseals(r1, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5e, 0x4d48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) 13:58:52 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:58:52 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2807.549834] FAULT_INJECTION: forcing a failure. [ 2807.549834] name failslab, interval 1, probability 0, space 0, times 0 [ 2807.552060] CPU: 1 PID: 19779 Comm: syz-executor.1 Not tainted 5.10.209 #1 [ 2807.553301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2807.554773] Call Trace: [ 2807.555268] dump_stack+0x107/0x167 [ 2807.555958] should_fail.cold+0x5/0xa [ 2807.556653] ? create_object.isra.0+0x3a/0xa20 [ 2807.557481] should_failslab+0x5/0x20 [ 2807.558173] kmem_cache_alloc+0x5b/0x310 [ 2807.558917] create_object.isra.0+0x3a/0xa20 [ 2807.559650] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2807.560596] __kmalloc+0x16e/0x390 [ 2807.561272] alloc_pipe_info+0x1e5/0x590 [ 2807.562033] splice_direct_to_actor+0x774/0x980 [ 2807.562872] ? _cond_resched+0x12/0x80 [ 2807.563582] ? pipe_to_sendpage+0x380/0x380 [ 2807.564419] ? selinux_file_permission+0x92/0x520 [ 2807.565278] ? do_splice_to+0x160/0x160 [ 2807.565980] ? security_file_permission+0x24e/0x570 [ 2807.566866] do_splice_direct+0x1c4/0x290 [ 2807.567589] ? splice_direct_to_actor+0x980/0x980 [ 2807.568448] ? selinux_file_permission+0x92/0x520 [ 2807.569213] ? security_file_permission+0x24e/0x570 [ 2807.569960] vfs_copy_file_range+0x4f8/0x1290 [ 2807.570632] ? generic_file_rw_checks+0x240/0x240 [ 2807.571346] ? __fget_files+0x296/0x4c0 [ 2807.571967] __do_sys_copy_file_range+0x193/0x420 [ 2807.572671] ? vfs_copy_file_range+0x1290/0x1290 [ 2807.573359] ? ksys_write+0x1a9/0x260 [ 2807.573915] ? __ia32_sys_read+0xb0/0xb0 [ 2807.574513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2807.575272] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2807.576038] do_syscall_64+0x33/0x40 [ 2807.576580] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2807.577325] RIP: 0033:0x7fa33218bb19 [ 2807.577871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2807.580472] RSP: 002b:00007fa32f701188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2807.581575] RAX: ffffffffffffffda RBX: 00007fa33229ef60 RCX: 00007fa33218bb19 [ 2807.582595] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2807.583621] RBP: 00007fa32f7011d0 R08: 0000000300000000 R09: 0000000000000000 [ 2807.584652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2807.585675] R13: 00007fff050e795f R14: 00007fa32f701300 R15: 0000000000022000 13:59:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 34) [ 2823.795584] FAULT_INJECTION: forcing a failure. [ 2823.795584] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.796551] CPU: 1 PID: 19794 Comm: syz-executor.1 Not tainted 5.10.209 #1 [ 2823.797115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2823.797797] Call Trace: [ 2823.798018] dump_stack+0x107/0x167 [ 2823.798322] should_fail.cold+0x5/0xa [ 2823.798640] ? iter_file_splice_write+0x16d/0xc30 [ 2823.799036] should_failslab+0x5/0x20 [ 2823.799344] __kmalloc+0x72/0x390 [ 2823.799636] iter_file_splice_write+0x16d/0xc30 [ 2823.800017] ? atime_needs_update+0x600/0x600 [ 2823.800403] ? shmem_get_link+0x440/0x440 [ 2823.800756] ? generic_splice_sendpage+0x140/0x140 [ 2823.801156] ? pipe_to_user+0x170/0x170 [ 2823.801486] ? _cond_resched+0x12/0x80 [ 2823.801819] ? lockdep_init_map_type+0x2c7/0x780 [ 2823.802205] ? generic_splice_sendpage+0x140/0x140 [ 2823.802606] direct_splice_actor+0x10f/0x170 [ 2823.802971] splice_direct_to_actor+0x387/0x980 [ 2823.803352] ? pipe_to_sendpage+0x380/0x380 [ 2823.803717] ? do_splice_to+0x160/0x160 [ 2823.804041] ? security_file_permission+0x24e/0x570 [ 2823.804472] do_splice_direct+0x1c4/0x290 [ 2823.804826] ? splice_direct_to_actor+0x980/0x980 [ 2823.805235] ? selinux_file_permission+0x92/0x520 [ 2823.805635] ? security_file_permission+0x24e/0x570 [ 2823.806077] vfs_copy_file_range+0x4f8/0x1290 [ 2823.806447] ? generic_file_rw_checks+0x240/0x240 [ 2823.806859] ? __fget_files+0x296/0x4c0 [ 2823.807193] __do_sys_copy_file_range+0x193/0x420 [ 2823.807603] ? vfs_copy_file_range+0x1290/0x1290 [ 2823.808007] ? ksys_write+0x1a9/0x260 [ 2823.808340] ? __ia32_sys_read+0xb0/0xb0 [ 2823.808688] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2823.809130] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2823.809566] do_syscall_64+0x33/0x40 [ 2823.809879] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2823.810315] RIP: 0033:0x7fa33218bb19 [ 2823.810622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2823.812171] RSP: 002b:00007fa32f701188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2823.812817] RAX: ffffffffffffffda RBX: 00007fa33229ef60 RCX: 00007fa33218bb19 [ 2823.813420] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2823.814035] RBP: 00007fa32f7011d0 R08: 0000000300000000 R09: 0000000000000000 [ 2823.814630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2823.815234] R13: 00007fff050e795f R14: 00007fa32f701300 R15: 0000000000022000 [ 2823.837234] FAULT_INJECTION: forcing a failure. [ 2823.837234] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.838275] CPU: 1 PID: 19803 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2823.838851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2823.839555] Call Trace: [ 2823.839788] dump_stack+0x107/0x167 [ 2823.840105] should_fail.cold+0x5/0xa [ 2823.840431] ? jbd2__journal_start+0x190/0x7e0 [ 2823.840814] should_failslab+0x5/0x20 [ 2823.841133] kmem_cache_alloc+0x5b/0x310 [ 2823.841477] jbd2__journal_start+0x190/0x7e0 [ 2823.841846] __ext4_journal_start_sb+0x214/0x390 [ 2823.842237] ext4_dirty_inode+0xbc/0x130 [ 2823.842579] ? ext4_setattr+0x2160/0x2160 [ 2823.842931] __mark_inode_dirty+0x492/0xd40 [ 2823.843291] touch_atime+0x5ea/0x6e0 [ 2823.843607] ? atime_needs_update+0x600/0x600 [ 2823.843971] ? pagecache_get_page+0x243/0xc80 [ 2823.844340] generic_file_buffered_read+0x191a/0x2920 [ 2823.844776] ? pagecache_get_page+0xc80/0xc80 [ 2823.845155] ? perf_trace_lock+0xac/0x490 [ 2823.845504] ? __lock_acquire+0x1657/0x5b00 [ 2823.845872] generic_file_read_iter+0x33f/0x490 [ 2823.846266] ext4_file_read_iter+0x184/0x4c0 [ 2823.846626] __kernel_read+0x593/0xaa0 [ 2823.846961] ? do_sendfile+0x1090/0x1090 [ 2823.847304] ? _cond_resched+0x12/0x80 [ 2823.847625] ? avc_policy_seqno+0x9/0x70 [ 2823.847961] ? selinux_file_permission+0x92/0x520 [ 2823.848386] kernel_read+0x52/0x70 [ 2823.848683] bprm_execve+0x882/0x1a60 [ 2823.849006] ? open_exec+0x70/0x70 [ 2823.849298] ? memcpy+0x39/0x60 [ 2823.849579] ? copy_string_kernel+0x3b6/0x450 [ 2823.849956] do_execveat_common+0x772/0x8d0 [ 2823.850306] ? bprm_execve+0x1a60/0x1a60 [ 2823.850648] __x64_sys_execveat+0xed/0x140 [ 2823.850996] do_syscall_64+0x33/0x40 [ 2823.851300] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2823.851717] RIP: 0033:0x7fac73041b19 [ 2823.852017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2823.853494] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2823.854119] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2823.854696] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2823.855268] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.855837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2823.856430] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:59:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000240)=""/239, 0xef) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x1, 0x5c, 0xf6, 0x0, 0x2, 0x10804, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0x7}, 0x482, 0x5, 0xb9e, 0x2, 0xfffffffffffffffa, 0x1f, 0x1ff, 0x0, 0x6a310d7a, 0x0, 0x9165}, r1, 0x1, r0, 0x0) 13:59:08 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 5) 13:59:08 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:59:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 49) 13:59:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:08 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000002, 0x0) [ 2823.859716] FAULT_INJECTION: forcing a failure. [ 2823.859716] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.861995] CPU: 0 PID: 19799 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2823.863180] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2823.864602] Call Trace: [ 2823.865078] dump_stack+0x107/0x167 [ 2823.865723] should_fail.cold+0x5/0xa [ 2823.866398] ? create_object.isra.0+0x3a/0xa20 [ 2823.867206] should_failslab+0x5/0x20 [ 2823.867864] kmem_cache_alloc+0x5b/0x310 [ 2823.868599] create_object.isra.0+0x3a/0xa20 [ 2823.869371] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2823.870273] __kmalloc+0x16e/0x390 [ 2823.870933] security_prepare_creds+0x112/0x190 [ 2823.871763] prepare_creds+0x452/0x5e0 [ 2823.872469] prepare_exec_creds+0xd/0x260 [ 2823.873195] bprm_execve+0x18f/0x1a60 [ 2823.873848] ? acct_arg_size+0xe0/0xe0 [ 2823.874514] ? downgrade_write+0x3a0/0x3a0 [ 2823.875243] ? open_exec+0x70/0x70 [ 2823.875851] ? memcpy+0x39/0x60 [ 2823.876440] ? copy_string_kernel+0x3b6/0x450 [ 2823.877238] do_execveat_common+0x772/0x8d0 [ 2823.878003] ? bprm_execve+0x1a60/0x1a60 [ 2823.878752] __x64_sys_execveat+0xed/0x140 [ 2823.879508] do_syscall_64+0x33/0x40 [ 2823.880167] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2823.881062] RIP: 0033:0x7fde11765b19 [ 2823.881716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2823.884879] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2823.886202] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2823.887437] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2823.888673] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2823.889902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2823.891144] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:59:08 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:08 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 6) [ 2823.949522] FAULT_INJECTION: forcing a failure. [ 2823.949522] name failslab, interval 1, probability 0, space 0, times 0 [ 2823.950553] CPU: 1 PID: 19810 Comm: syz-executor.1 Not tainted 5.10.209 #1 [ 2823.951122] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2823.951808] Call Trace: [ 2823.952030] dump_stack+0x107/0x167 [ 2823.952345] should_fail.cold+0x5/0xa [ 2823.952672] ? create_object.isra.0+0x3a/0xa20 [ 2823.953070] should_failslab+0x5/0x20 [ 2823.953397] kmem_cache_alloc+0x5b/0x310 [ 2823.953727] ? igrab+0xc0/0xc0 [ 2823.954000] create_object.isra.0+0x3a/0xa20 [ 2823.954349] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2823.954770] __kmalloc+0x16e/0x390 [ 2823.955073] iter_file_splice_write+0x16d/0xc30 [ 2823.955456] ? atime_needs_update+0x600/0x600 [ 2823.955834] ? shmem_get_link+0x440/0x440 [ 2823.956198] ? generic_splice_sendpage+0x140/0x140 [ 2823.956593] ? pipe_to_user+0x170/0x170 [ 2823.956923] ? _cond_resched+0x12/0x80 [ 2823.957256] ? lockdep_init_map_type+0x2c7/0x780 [ 2823.957644] ? generic_splice_sendpage+0x140/0x140 [ 2823.958046] direct_splice_actor+0x10f/0x170 [ 2823.958404] splice_direct_to_actor+0x387/0x980 [ 2823.958789] ? pipe_to_sendpage+0x380/0x380 [ 2823.959138] ? do_splice_to+0x160/0x160 [ 2823.959454] ? security_file_permission+0x24e/0x570 [ 2823.959861] do_splice_direct+0x1c4/0x290 [ 2823.960207] ? splice_direct_to_actor+0x980/0x980 [ 2823.960592] ? selinux_file_permission+0x92/0x520 [ 2823.960988] ? security_file_permission+0x24e/0x570 [ 2823.961397] vfs_copy_file_range+0x4f8/0x1290 [ 2823.961760] ? generic_file_rw_checks+0x240/0x240 [ 2823.962155] ? __fget_files+0x296/0x4c0 [ 2823.962490] __do_sys_copy_file_range+0x193/0x420 [ 2823.962884] ? vfs_copy_file_range+0x1290/0x1290 [ 2823.963266] ? ksys_write+0x1a9/0x260 [ 2823.963575] ? __ia32_sys_read+0xb0/0xb0 [ 2823.963905] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2823.964339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2823.964760] do_syscall_64+0x33/0x40 [ 2823.965068] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2823.965481] RIP: 0033:0x7fa33218bb19 [ 2823.965781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2823.967230] RSP: 002b:00007fa32f701188 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2823.967844] RAX: ffffffffffffffda RBX: 00007fa33229ef60 RCX: 00007fa33218bb19 [ 2823.968412] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000004 [ 2823.968979] RBP: 00007fa32f7011d0 R08: 0000000300000000 R09: 0000000000000000 [ 2823.969544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2823.970112] R13: 00007fff050e795f R14: 00007fa32f701300 R15: 0000000000022000 13:59:08 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x9, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:59:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 50) 13:59:08 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000008, 0x0) 13:59:08 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(0x0, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 35) [ 2824.037317] FAULT_INJECTION: forcing a failure. [ 2824.037317] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.038345] CPU: 1 PID: 19821 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2824.038900] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.039558] Call Trace: [ 2824.039778] dump_stack+0x107/0x167 [ 2824.040089] should_fail.cold+0x5/0xa [ 2824.040402] ? __alloc_file+0x21/0x320 [ 2824.040725] should_failslab+0x5/0x20 [ 2824.041045] kmem_cache_alloc+0x5b/0x310 [ 2824.041377] ? kernel_text_address+0xf2/0x120 [ 2824.041747] __alloc_file+0x21/0x320 [ 2824.042053] alloc_empty_file+0x6d/0x170 [ 2824.042387] path_openat+0xe3/0x26e0 [ 2824.042695] ? lock_chain_count+0x20/0x20 [ 2824.043034] ? stack_trace_save+0x8c/0xc0 [ 2824.043374] ? stack_trace_consume_entry+0x160/0x160 [ 2824.043784] ? path_lookupat+0x860/0x860 [ 2824.044135] ? kasan_save_stack+0x32/0x40 [ 2824.044472] ? kasan_save_stack+0x1b/0x40 [ 2824.044808] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.045221] ? security_prepare_creds+0x112/0x190 [ 2824.045607] ? prepare_creds+0x452/0x5e0 [ 2824.045930] ? prepare_exec_creds+0xd/0x260 [ 2824.046278] ? bprm_execve+0x18f/0x1a60 [ 2824.046599] do_filp_open+0x190/0x3e0 [ 2824.046916] ? may_open_dev+0xf0/0xf0 [ 2824.047230] ? perf_trace_lock+0xac/0x490 [ 2824.047565] ? perf_trace_lock+0xac/0x490 [ 2824.047895] ? SOFTIRQ_verbose+0x10/0x10 [ 2824.048246] ? find_held_lock+0x2c/0x110 [ 2824.048583] do_open_execat+0x116/0x690 [ 2824.048910] ? __do_sys_uselib+0x5e0/0x5e0 [ 2824.049254] ? do_raw_spin_lock+0x121/0x260 [ 2824.049608] ? rwlock_bug.part.0+0x90/0x90 [ 2824.049961] bprm_execve+0x55e/0x1a60 [ 2824.050282] ? open_exec+0x70/0x70 [ 2824.050570] ? memcpy+0x39/0x60 [ 2824.050848] ? copy_string_kernel+0x3b6/0x450 [ 2824.051216] do_execveat_common+0x772/0x8d0 [ 2824.051565] ? bprm_execve+0x1a60/0x1a60 [ 2824.051913] __x64_sys_execveat+0xed/0x140 [ 2824.052263] do_syscall_64+0x33/0x40 [ 2824.052562] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.052679] FAULT_INJECTION: forcing a failure. [ 2824.052679] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.052970] RIP: 0033:0x7fde11765b19 [ 2824.052982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.052988] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2824.053000] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2824.053006] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2824.053012] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.053018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.053024] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2824.066473] CPU: 0 PID: 19819 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2824.067665] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.069076] Call Trace: [ 2824.069537] dump_stack+0x107/0x167 [ 2824.070180] should_fail.cold+0x5/0xa [ 2824.070851] ? security_file_alloc+0x34/0x170 [ 2824.071629] should_failslab+0x5/0x20 [ 2824.072282] kmem_cache_alloc+0x5b/0x310 [ 2824.073001] security_file_alloc+0x34/0x170 [ 2824.073754] __alloc_file+0xb7/0x320 [ 2824.074395] alloc_empty_file+0x6d/0x170 [ 2824.075105] path_openat+0xe3/0x26e0 [ 2824.075750] ? lock_acquire+0x197/0x470 [ 2824.076464] ? path_lookupat+0x860/0x860 [ 2824.077177] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2824.078041] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2824.078899] do_filp_open+0x190/0x3e0 [ 2824.079558] ? may_open_dev+0xf0/0xf0 [ 2824.080218] ? lock_chain_count+0x20/0x20 [ 2824.080938] ? __lockdep_reset_lock+0x180/0x180 [ 2824.081730] ? lock_acquire+0x197/0x470 [ 2824.082423] ? lock_release+0x680/0x680 [ 2824.083105] ? find_held_lock+0x2c/0x110 [ 2824.083851] ? kmem_cache_alloc+0x159/0x310 [ 2824.084818] ? mark_held_locks+0x9e/0xe0 [ 2824.085554] do_open_execat+0x116/0x690 [ 2824.086232] ? trace_hardirqs_on+0x5b/0x180 [ 2824.086982] ? __do_sys_uselib+0x5e0/0x5e0 [ 2824.087726] ? memcpy+0x39/0x60 [ 2824.088318] open_exec+0x42/0x70 [ 2824.088905] load_misc_binary+0x973/0xb70 [ 2824.089634] bprm_execve+0x969/0x1a60 [ 2824.090320] ? open_exec+0x70/0x70 [ 2824.090927] ? memcpy+0x39/0x60 [ 2824.091504] ? copy_string_kernel+0x3b6/0x450 [ 2824.092296] do_execveat_common+0x772/0x8d0 [ 2824.093052] ? bprm_execve+0x1a60/0x1a60 [ 2824.093781] __x64_sys_execveat+0xed/0x140 [ 2824.094532] do_syscall_64+0x33/0x40 [ 2824.095167] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.096045] RIP: 0033:0x7fac73041b19 [ 2824.096686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.099785] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2824.101091] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2824.102307] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2824.103521] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.104740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.105960] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:59:08 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) (fail_nth: 7) 13:59:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 36) [ 2824.128570] FAULT_INJECTION: forcing a failure. [ 2824.128570] name failslab, interval 1, probability 0, space 0, times 0 [ 2824.129571] CPU: 1 PID: 19825 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2824.130130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.130793] Call Trace: [ 2824.131021] dump_stack+0x107/0x167 [ 2824.131324] should_fail.cold+0x5/0xa [ 2824.131635] ? create_object.isra.0+0x3a/0xa20 [ 2824.132016] should_failslab+0x5/0x20 [ 2824.132335] kmem_cache_alloc+0x5b/0x310 [ 2824.132669] create_object.isra.0+0x3a/0xa20 [ 2824.133035] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.133450] kmem_cache_alloc+0x159/0x310 [ 2824.133792] __alloc_file+0x21/0x320 [ 2824.134097] alloc_empty_file+0x6d/0x170 [ 2824.134429] path_openat+0xe3/0x26e0 [ 2824.134734] ? lock_chain_count+0x20/0x20 [ 2824.135072] ? stack_trace_save+0x8c/0xc0 [ 2824.135407] ? stack_trace_consume_entry+0x160/0x160 [ 2824.135814] ? path_lookupat+0x860/0x860 [ 2824.136164] ? kasan_save_stack+0x32/0x40 [ 2824.136498] ? kasan_save_stack+0x1b/0x40 [ 2824.136837] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2824.137251] ? security_prepare_creds+0x112/0x190 [ 2824.137640] ? prepare_creds+0x452/0x5e0 [ 2824.137971] ? prepare_exec_creds+0xd/0x260 [ 2824.138318] ? bprm_execve+0x18f/0x1a60 [ 2824.138645] do_filp_open+0x190/0x3e0 [ 2824.138952] ? may_open_dev+0xf0/0xf0 [ 2824.139271] ? perf_trace_lock+0xac/0x490 [ 2824.139607] ? perf_trace_lock+0xac/0x490 [ 2824.139942] ? SOFTIRQ_verbose+0x10/0x10 [ 2824.140297] ? find_held_lock+0x2c/0x110 [ 2824.140631] do_open_execat+0x116/0x690 [ 2824.140960] ? __do_sys_uselib+0x5e0/0x5e0 [ 2824.141310] ? do_raw_spin_lock+0x121/0x260 [ 2824.141664] ? rwlock_bug.part.0+0x90/0x90 [ 2824.142023] bprm_execve+0x55e/0x1a60 [ 2824.142344] ? open_exec+0x70/0x70 [ 2824.142632] ? memcpy+0x39/0x60 [ 2824.142906] ? copy_string_kernel+0x3b6/0x450 [ 2824.143277] do_execveat_common+0x772/0x8d0 [ 2824.143630] ? bprm_execve+0x1a60/0x1a60 [ 2824.143972] __x64_sys_execveat+0xed/0x140 [ 2824.144327] do_syscall_64+0x33/0x40 [ 2824.144627] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.145052] RIP: 0033:0x7fde11765b19 [ 2824.145355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2824.146818] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2824.147190] syz-executor.7 (19812) used greatest stack depth: 22680 bytes left [ 2824.147433] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2824.147449] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2824.149848] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.150420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2824.150994] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2824.186660] FAULT_INJECTION: forcing a failure. [ 2824.186660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2824.187722] CPU: 1 PID: 19828 Comm: syz-executor.1 Not tainted 5.10.209 #1 [ 2824.188286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2824.188951] Call Trace: [ 2824.189173] dump_stack+0x107/0x167 [ 2824.189477] should_fail.cold+0x5/0xa [ 2824.189792] _copy_to_user+0x2e/0x180 [ 2824.190111] simple_read_from_buffer+0xcc/0x160 [ 2824.190491] proc_fail_nth_read+0x198/0x230 [ 2824.190844] ? proc_sessionid_read+0x230/0x230 [ 2824.191216] ? security_file_permission+0x24e/0x570 [ 2824.191614] ? perf_trace_initcall_start+0x101/0x380 [ 2824.192034] ? proc_sessionid_read+0x230/0x230 [ 2824.192411] vfs_read+0x228/0x580 [ 2824.192699] ksys_read+0x12d/0x260 [ 2824.192990] ? vfs_write+0xa70/0xa70 [ 2824.193303] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2824.193726] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2824.194148] do_syscall_64+0x33/0x40 [ 2824.194451] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2824.194866] RIP: 0033:0x7fa33213e69c [ 2824.195170] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2824.196649] RSP: 002b:00007fa32f701170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2824.197265] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fa33213e69c [ 2824.197836] RDX: 000000000000000f RSI: 00007fa32f7011e0 RDI: 0000000000000006 [ 2824.198408] RBP: 00007fa32f7011d0 R08: 0000000000000000 R09: 0000000000000000 [ 2824.198981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2824.199550] R13: 00007fff050e795f R14: 00007fa32f701300 R15: 0000000000022000 13:59:23 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:23 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:23 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 37) 13:59:23 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000010, 0x0) 13:59:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:59:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 51) 13:59:23 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) ftruncate(r0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) write$P9_RREADLINK(r1, 0x0, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x0, 0x2, [{}, {}]}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x65, 0x1, 0x6, 0x401, 0x3, 0x0, 0x0, 0x146, 0x40, 0x5, 0xe2d, 0x80, 0x38, 0x2, 0x5, 0x3f, 0x7}, [{0x1, 0x8, 0x3, 0x3ff, 0x6, 0x8a2, 0x1, 0x3d}], "1a521ac29865227e86a2d6e3e4a56c967f4266207ce455d09d0ef9085748369ff4da295c332006a7a38bf6f5da2c7faa266b807abdc3689b3fb78d641e8f2b0cfa6eee3e0f88fe416cba9c312a62fd757484c3eb8e8c920d459273044177c0a95b105267f4561e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8df) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r2, 0xc) fcntl$dupfd(r3, 0x406, r2) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) r5 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = gettid() kcmp(0x0, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r5, r6, 0x18) sendmsg$nl_generic(r1, &(0x7f0000001000)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000bc0)={0x3f8, 0x31, 0x900, 0x70bd2a, 0x25dfdbfc, {0x9}, [@generic="f5cdfee90ceb9880f00a0ca094f27103313ed4e8a4a994fd99176d788bafcdab714575424aa814c77a7fe592", @generic="bfa8bc6cf66b0e6bc8061fb83c07cf25bb09da172ee2142a069d72322f3cdffa149684e4a50ac153e46901814c4d1052edbfad07a003e31bf892c956f7f83acbf0f908380c3fcf68647f55dba0475cbd81813a258360399f2738e2529d349db94addbb67a8f12032d6730fc6ffcfc6444053943f6c4cfb1e1baf0923a60176830473397a2b2abf58e35fade74f66e58b43e02449a895d5", @nested={0x14, 0x15, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x31}}, @typed={0x8, 0x29, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="935a5a75bc9b3448edeaa62395d24409cade6594fbed4b7d0efa16233821a9cf8b78bbd761753fa71d319c5f11ae42609900eaa09f", @nested={0x55, 0x1e, 0x0, 0x1, [@typed={0x4, 0xd}, @typed={0x4, 0x27}, @typed={0x8, 0x7b, 0x0, 0x0, @pid}, @typed={0xd, 0x39, 0x0, 0x0, @str='/dev/sr0\x00'}, @typed={0x8, 0x67, 0x0, 0x0, @pid=r6}, @generic="347d4bf73af675f69ff6e0d104511172e4e001390c83f0d0f4e7847a5666e10604dc336c95a1ecba59"]}, @nested={0x16f, 0xd, 0x0, 0x1, [@typed={0x14, 0x19, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xef, 0x14, 0x0, 0x0, @binary="0582359ad38ba3e6d982ab4ae9c30239875c03ebe8f9c1b8e68b593503783f668c4e0f328829df4d6f8cd4309b5147ac89e84105346b075a654c92af669867f5897716c7cc48b6c0b489fdc807c25137812ac530a0be32caafd69608466e6e914b37c1e8cb1edbe92a655136e467dd5418dfaf51aab90e5b992ca601f8916438a7570612a6457bcaad7c588c373af7adce089fb49462031be0176237c50888de60b585d414a44656ee229c3b8f34fb641e6df3654d9c80b02cbf2df9cb07b2decaa540616e9b3da043e9addbd1c0d6fcd85b7bcfdd1689cf76a184a52764d03d78f748e3b3e68fdd31061b"}, @typed={0x8, 0x3d, 0x0, 0x0, @u32=0x7}, @generic="dd618ffbf1704b29dae5611a293c99e465d4a820edcc2df0419ee2771de2c01d1f", @generic="d37fc114c89f29f2114bc96cc023fcf77fb938a7d59cfc798afd1d6b189b600a61403dbe6964495b1655c3d85e1df688c502e7686fd3", @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x8000}]}, @generic="dbfae06f4ef87462fb4652c45340a20f43eece1bf20db63aabf717b20dd9c6d44c1f1e26a722d427c6c4b4a714a9b97ee616ef77cf7061f9a003fc8a3a46e4541033d602e6c7d903db9ef49ee95b5926b7a63f7f4f9b04c74671408b95534adf125874eb129de611339ccc7a26e0644efa4ddf8f4dc46538934157d675567f9f4999dc2c12eff6a2bb9419f0f83473753f24354767f44b068e0d037fd119175805f290672cfbdf36728d0e1d9a1e725898f0e1b3b16b9805c47e22bff389b42713f12ce716f1e229f8b82970f84309d2f55633fe60a503efdccd138794c23584d7c70d8650e7cd86fd471bd8f97231a99a6e9e8592b2599690", @typed={0x14, 0x4c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}]}, 0x3f8}, 0x1, 0x0, 0x0, 0xd0e97a44276c3f1a}, 0x10) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r7, 0x4c00, r4) symlinkat(&(0x7f0000000180)='./file1\x00', r4, &(0x7f0000000b40)='./file1\x00') ioctl$int_out(r2, 0x5462, &(0x7f0000000000)) 13:59:23 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2838.859135] FAULT_INJECTION: forcing a failure. [ 2838.859135] name failslab, interval 1, probability 0, space 0, times 0 [ 2838.860217] CPU: 0 PID: 19849 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2838.860857] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2838.861601] Call Trace: [ 2838.861861] dump_stack+0x107/0x167 [ 2838.862204] should_fail.cold+0x5/0xa [ 2838.862561] ? load_elf_phdrs+0x10c/0x230 [ 2838.862953] should_failslab+0x5/0x20 [ 2838.863289] __kmalloc+0x72/0x390 [ 2838.863625] load_elf_phdrs+0x10c/0x230 [ 2838.864003] ? set_brk+0x180/0x180 [ 2838.864357] load_elf_binary+0x1ff/0x5730 [ 2838.864748] ? __lockdep_reset_lock+0x180/0x180 [ 2838.865197] ? lock_acquire+0x197/0x470 [ 2838.865563] ? find_held_lock+0x2c/0x110 [ 2838.865954] ? bprm_execve+0x948/0x1a60 [ 2838.866315] ? elf_core_dump+0x3c50/0x3c50 [ 2838.866681] ? do_raw_read_unlock+0x3b/0x70 [ 2838.867095] ? _raw_read_unlock+0x1a/0x30 [ 2838.867472] ? load_misc_binary+0x605/0xb70 [ 2838.867880] bprm_execve+0x969/0x1a60 [ 2838.868255] ? open_exec+0x70/0x70 [ 2838.868588] ? memcpy+0x39/0x60 [ 2838.868907] ? copy_string_kernel+0x3b6/0x450 [ 2838.869323] do_execveat_common+0x772/0x8d0 [ 2838.869712] ? bprm_execve+0x1a60/0x1a60 [ 2838.870111] __x64_sys_execveat+0xed/0x140 [ 2838.870498] do_syscall_64+0x33/0x40 [ 2838.870836] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2838.871293] RIP: 0033:0x7fac73041b19 [ 2838.871626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2838.873252] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2838.873936] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2838.874555] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2838.875185] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2838.875815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2838.876453] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:59:23 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000002, 0x0) [ 2838.884521] FAULT_INJECTION: forcing a failure. [ 2838.884521] name failslab, interval 1, probability 0, space 0, times 0 [ 2838.885639] CPU: 0 PID: 19848 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2838.886262] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2838.886997] Call Trace: [ 2838.887240] dump_stack+0x107/0x167 [ 2838.887576] should_fail.cold+0x5/0xa [ 2838.887941] ? security_file_alloc+0x34/0x170 [ 2838.888354] should_failslab+0x5/0x20 [ 2838.888696] kmem_cache_alloc+0x5b/0x310 [ 2838.889091] security_file_alloc+0x34/0x170 [ 2838.889483] __alloc_file+0xb7/0x320 [ 2838.889824] alloc_empty_file+0x6d/0x170 [ 2838.890203] path_openat+0xe3/0x26e0 [ 2838.890550] ? stack_trace_save+0x8c/0xc0 [ 2838.890930] ? stack_trace_consume_entry+0x160/0x160 [ 2838.891377] ? path_lookupat+0x860/0x860 [ 2838.891749] ? kasan_save_stack+0x32/0x40 [ 2838.892137] ? kasan_save_stack+0x1b/0x40 [ 2838.892523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2838.892984] ? security_prepare_creds+0x112/0x190 [ 2838.893413] ? prepare_creds+0x452/0x5e0 [ 2838.893787] ? prepare_exec_creds+0xd/0x260 [ 2838.894193] do_filp_open+0x190/0x3e0 [ 2838.894535] ? may_open_dev+0xf0/0xf0 [ 2838.894891] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2838.895348] ? perf_trace_lock+0x2bd/0x490 [ 2838.895751] ? find_held_lock+0x2c/0x110 [ 2838.896129] do_open_execat+0x116/0x690 [ 2838.896499] ? __do_sys_uselib+0x5e0/0x5e0 [ 2838.896891] ? do_raw_spin_lock+0x121/0x260 [ 2838.897276] ? rwlock_bug.part.0+0x90/0x90 [ 2838.897668] bprm_execve+0x55e/0x1a60 [ 2838.898027] ? open_exec+0x70/0x70 [ 2838.898351] ? memcpy+0x39/0x60 [ 2838.898652] ? copy_string_kernel+0x3b6/0x450 [ 2838.899074] do_execveat_common+0x772/0x8d0 [ 2838.899461] ? bprm_execve+0x1a60/0x1a60 [ 2838.899853] __x64_sys_execveat+0xed/0x140 [ 2838.900256] do_syscall_64+0x33/0x40 [ 2838.900592] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2838.901061] RIP: 0033:0x7fde11765b19 [ 2838.901392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2838.903005] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2838.903679] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2838.904330] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2838.904960] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2838.905588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2838.906232] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2855.077975] FAULT_INJECTION: forcing a failure. [ 2855.077975] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.079124] CPU: 0 PID: 19868 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2855.079739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.080502] Call Trace: [ 2855.080749] dump_stack+0x107/0x167 [ 2855.081090] should_fail.cold+0x5/0xa [ 2855.081444] ? create_object.isra.0+0x3a/0xa20 [ 2855.081863] should_failslab+0x5/0x20 [ 2855.082210] kmem_cache_alloc+0x5b/0x310 [ 2855.082590] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2855.083095] create_object.isra.0+0x3a/0xa20 [ 2855.083495] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.083961] kmem_cache_alloc+0x159/0x310 [ 2855.084357] security_file_alloc+0x34/0x170 [ 2855.084740] __alloc_file+0xb7/0x320 [ 2855.085081] alloc_empty_file+0x6d/0x170 [ 2855.085445] path_openat+0xe3/0x26e0 [ 2855.085774] ? stack_trace_save+0x8c/0xc0 [ 2855.086156] ? stack_trace_consume_entry+0x160/0x160 [ 2855.086620] ? path_lookupat+0x860/0x860 [ 2855.087004] ? kasan_save_stack+0x32/0x40 [ 2855.087360] ? kasan_save_stack+0x1b/0x40 [ 2855.087736] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.088194] ? security_prepare_creds+0x112/0x190 [ 2855.088640] ? prepare_creds+0x452/0x5e0 [ 2855.089010] ? prepare_exec_creds+0xd/0x260 [ 2855.089411] do_filp_open+0x190/0x3e0 [ 2855.089758] ? may_open_dev+0xf0/0xf0 [ 2855.090107] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2855.090571] ? perf_trace_lock+0x2bd/0x490 [ 2855.090984] ? find_held_lock+0x2c/0x110 [ 2855.091372] do_open_execat+0x116/0x690 [ 2855.091738] ? __do_sys_uselib+0x5e0/0x5e0 [ 2855.092126] ? do_raw_spin_lock+0x121/0x260 [ 2855.092529] ? rwlock_bug.part.0+0x90/0x90 [ 2855.092950] bprm_execve+0x55e/0x1a60 [ 2855.093320] ? open_exec+0x70/0x70 [ 2855.093647] ? memcpy+0x39/0x60 [ 2855.093952] ? copy_string_kernel+0x3b6/0x450 [ 2855.094376] do_execveat_common+0x772/0x8d0 [ 2855.094782] ? bprm_execve+0x1a60/0x1a60 [ 2855.095174] __x64_sys_execveat+0xed/0x140 [ 2855.095571] do_syscall_64+0x33/0x40 [ 2855.095911] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2855.096372] RIP: 0033:0x7fde11765b19 [ 2855.096715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.098356] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2855.099049] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2855.099720] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2855.100389] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.101045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.101684] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:59:39 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000008, 0x0) 13:59:39 executing program 6: syz_mount_image$msdos(&(0x7f0000000380), &(0x7f0000000480)='./file0\x00', 0x2, 0x0, &(0x7f0000000580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000080000000000003c541cab40e02fb7d34e3b061234123f6b265193962b7f199892a7fa905bdd06f0439ed42109e16bd51ada75c651152ef6e384896dc172a20d5b4a6b23e6a087ffc84d7f2a9e20b386e45d820ff6f050f47561c053b96dd8a9bf3387b395"]) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)={0x404040, 0x1c, 0x3}, 0x18) 13:59:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:59:39 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:39 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x30000001c, 0x0) 13:59:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 38) 13:59:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 52) 13:59:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 39) [ 2855.159918] FAT-fs (loop6): bogus number of reserved sectors [ 2855.160699] FAT-fs (loop6): Can't find a valid FAT filesystem [ 2855.163513] FAULT_INJECTION: forcing a failure. [ 2855.163513] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.164869] CPU: 1 PID: 19877 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2855.165668] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.166618] Call Trace: [ 2855.166932] dump_stack+0x107/0x167 [ 2855.167354] should_fail.cold+0x5/0xa [ 2855.167801] ? create_object.isra.0+0x3a/0xa20 [ 2855.168336] should_failslab+0x5/0x20 [ 2855.168786] kmem_cache_alloc+0x5b/0x310 [ 2855.169259] create_object.isra.0+0x3a/0xa20 [ 2855.169765] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.170358] __kmalloc+0x16e/0x390 [ 2855.170771] load_elf_phdrs+0x10c/0x230 [ 2855.171235] ? set_brk+0x180/0x180 [ 2855.171659] load_elf_binary+0x1ff/0x5730 [ 2855.172134] ? load_elf_binary+0x503/0x4bc0 [ 2855.172652] ? __lockdep_reset_lock+0x180/0x180 [ 2855.173196] ? lock_acquire+0x197/0x470 [ 2855.173653] ? find_held_lock+0x2c/0x110 [ 2855.174127] ? bprm_execve+0x948/0x1a60 [ 2855.174579] ? elf_core_dump+0x3c50/0x3c50 13:59:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2855.175067] ? do_raw_read_unlock+0x3b/0x70 [ 2855.175745] ? _raw_read_unlock+0x1a/0x30 [ 2855.176218] ? load_misc_binary+0x605/0xb70 [ 2855.176731] bprm_execve+0x969/0x1a60 [ 2855.177184] ? open_exec+0x70/0x70 [ 2855.177588] ? memcpy+0x39/0x60 [ 2855.177974] ? copy_string_kernel+0x3b6/0x450 [ 2855.178496] do_execveat_common+0x772/0x8d0 [ 2855.179005] ? bprm_execve+0x1a60/0x1a60 [ 2855.179490] __x64_sys_execveat+0xed/0x140 [ 2855.179984] do_syscall_64+0x33/0x40 [ 2855.180415] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2855.180993] RIP: 0033:0x7fac73041b19 [ 2855.181420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.183479] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2855.184342] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2855.185167] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2855.185972] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.186774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.187692] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:59:39 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300001c00, 0x0) 13:59:39 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000010, 0x0) 13:59:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2855.203035] FAULT_INJECTION: forcing a failure. [ 2855.203035] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.204224] CPU: 0 PID: 19882 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2855.204844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.205577] Call Trace: [ 2855.205823] dump_stack+0x107/0x167 [ 2855.206159] should_fail.cold+0x5/0xa [ 2855.206506] ? jbd2__journal_start+0x190/0x7e0 [ 2855.206923] should_failslab+0x5/0x20 [ 2855.207267] kmem_cache_alloc+0x5b/0x310 [ 2855.207643] jbd2__journal_start+0x190/0x7e0 [ 2855.208042] __ext4_journal_start_sb+0x214/0x390 [ 2855.208484] ext4_dirty_inode+0xbc/0x130 [ 2855.208849] ? ext4_setattr+0x2160/0x2160 [ 2855.209214] __mark_inode_dirty+0x492/0xd40 [ 2855.209609] touch_atime+0x5ea/0x6e0 [ 2855.209947] ? atime_needs_update+0x600/0x600 [ 2855.210355] ? pagecache_get_page+0x243/0xc80 [ 2855.210766] generic_file_buffered_read+0x191a/0x2920 [ 2855.211253] ? pagecache_get_page+0xc80/0xc80 [ 2855.211674] generic_file_read_iter+0x33f/0x490 [ 2855.212103] ext4_file_read_iter+0x184/0x4c0 [ 2855.212509] __kernel_read+0x593/0xaa0 [ 2855.212868] ? do_sendfile+0x1090/0x1090 [ 2855.213230] ? _cond_resched+0x12/0x80 [ 2855.213585] ? avc_policy_seqno+0x9/0x70 [ 2855.213953] ? selinux_file_permission+0x92/0x520 [ 2855.214395] ? lock_downgrade+0x6d0/0x6d0 [ 2855.214784] kernel_read+0x52/0x70 [ 2855.215105] bprm_execve+0x882/0x1a60 [ 2855.215461] ? open_exec+0x70/0x70 [ 2855.215779] ? memcpy+0x39/0x60 [ 2855.216075] ? copy_string_kernel+0x3b6/0x450 [ 2855.216494] do_execveat_common+0x772/0x8d0 [ 2855.216889] ? bprm_execve+0x1a60/0x1a60 [ 2855.217264] __x64_sys_execveat+0xed/0x140 [ 2855.217649] do_syscall_64+0x33/0x40 [ 2855.217979] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2855.218436] RIP: 0033:0x7fde11765b19 [ 2855.218773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.220337] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2855.221026] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2855.221656] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2855.222286] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.222923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.223550] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:59:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 40) 13:59:39 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2855.257301] FAT-fs (loop6): bogus number of reserved sectors [ 2855.258100] FAT-fs (loop6): Can't find a valid FAT filesystem 13:59:39 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 53) [ 2855.328704] FAULT_INJECTION: forcing a failure. [ 2855.328704] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.329789] CPU: 0 PID: 19904 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2855.330399] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.330623] FAULT_INJECTION: forcing a failure. [ 2855.330623] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.331123] Call Trace: [ 2855.331141] dump_stack+0x107/0x167 [ 2855.331160] should_fail.cold+0x5/0xa [ 2855.331181] ? __request_module+0x2e0/0x920 [ 2855.333613] ? bprm_execve+0xbe6/0x1a60 [ 2855.333968] should_failslab+0x5/0x20 [ 2855.334313] kmem_cache_alloc_trace+0x55/0x320 [ 2855.334734] ? bprm_execve+0xbe6/0x1a60 [ 2855.335080] __request_module+0x2e0/0x920 [ 2855.335455] ? free_modprobe_argv+0x90/0x90 [ 2855.335846] ? __lockdep_reset_lock+0x180/0x180 [ 2855.336261] ? find_held_lock+0x2c/0x110 [ 2855.336672] ? bprm_execve+0xa13/0x1a60 [ 2855.337019] ? lock_downgrade+0x6d0/0x6d0 [ 2855.337386] ? elf_core_dump+0x3c50/0x3c50 [ 2855.337763] ? do_raw_read_unlock+0x3b/0x70 [ 2855.338148] ? _raw_read_unlock+0x1a/0x30 [ 2855.338507] ? load_misc_binary+0x605/0xb70 [ 2855.338904] bprm_execve+0xbe6/0x1a60 [ 2855.339262] ? open_exec+0x70/0x70 [ 2855.339583] ? memcpy+0x39/0x60 [ 2855.339878] ? copy_string_kernel+0x3b6/0x450 [ 2855.340290] do_execveat_common+0x772/0x8d0 [ 2855.340677] ? bprm_execve+0x1a60/0x1a60 [ 2855.341059] __x64_sys_execveat+0xed/0x140 [ 2855.341438] do_syscall_64+0x33/0x40 [ 2855.341769] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2855.342209] RIP: 0033:0x7fac73041b19 [ 2855.342547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.344110] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2855.344787] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2855.345419] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2855.346045] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.346679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.347305] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2855.347971] CPU: 1 PID: 19902 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2855.348703] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.349555] Call Trace: [ 2855.349839] dump_stack+0x107/0x167 [ 2855.350223] should_fail.cold+0x5/0xa [ 2855.350623] ? create_object.isra.0+0x3a/0xa20 [ 2855.351095] should_failslab+0x5/0x20 [ 2855.351496] kmem_cache_alloc+0x5b/0x310 [ 2855.351924] create_object.isra.0+0x3a/0xa20 [ 2855.352381] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2855.352921] kmem_cache_alloc+0x159/0x310 [ 2855.353358] jbd2__journal_start+0x190/0x7e0 [ 2855.353822] __ext4_journal_start_sb+0x214/0x390 [ 2855.354316] ext4_dirty_inode+0xbc/0x130 [ 2855.354731] ? ext4_setattr+0x2160/0x2160 [ 2855.355151] __mark_inode_dirty+0x492/0xd40 [ 2855.355596] touch_atime+0x5ea/0x6e0 [ 2855.355984] ? atime_needs_update+0x600/0x600 [ 2855.356453] ? pagecache_get_page+0x243/0xc80 [ 2855.356918] generic_file_buffered_read+0x191a/0x2920 [ 2855.357465] ? pagecache_get_page+0xc80/0xc80 [ 2855.357926] ? __lock_acquire+0xbb1/0x5b00 [ 2855.358361] generic_file_read_iter+0x33f/0x490 [ 2855.358840] ext4_file_read_iter+0x184/0x4c0 [ 2855.359292] __kernel_read+0x593/0xaa0 [ 2855.359692] ? do_sendfile+0x1090/0x1090 [ 2855.360111] ? _cond_resched+0x12/0x80 [ 2855.360518] ? avc_policy_seqno+0x9/0x70 [ 2855.360928] ? selinux_file_permission+0x92/0x520 [ 2855.361420] ? lock_downgrade+0x6d0/0x6d0 [ 2855.361852] kernel_read+0x52/0x70 [ 2855.362221] bprm_execve+0x882/0x1a60 [ 2855.362618] ? open_exec+0x70/0x70 [ 2855.362983] ? memcpy+0x39/0x60 [ 2855.363329] ? copy_string_kernel+0x3b6/0x450 [ 2855.363793] do_execveat_common+0x772/0x8d0 [ 2855.364239] ? bprm_execve+0x1a60/0x1a60 [ 2855.364681] __x64_sys_execveat+0xed/0x140 [ 2855.365123] do_syscall_64+0x33/0x40 [ 2855.365505] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2855.366030] RIP: 0033:0x7fde11765b19 [ 2855.366413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.368251] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2855.369023] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2855.369732] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2855.370441] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.371149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.371855] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:59:39 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:40 executing program 6: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080)=0x911, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="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", 0xff}, {&(0x7f0000000a00)="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", 0x807}], 0x2}, 0xc880) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x0, 0x1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xab, 0x20, 0x2, 0x20, 0x0, 0x7fffffff, 0x44000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x609b, 0x2}, 0x4, 0x407, 0x6, 0x6, 0xbc, 0xd, 0x68, 0x0, 0x6, 0x0, 0x1}, 0x0, 0x9, r2, 0xc) fcntl$dupfd(r3, 0x406, r2) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000480)=ANY=[@ANYBLOB="48f5823ba92812a44fc81f107b1516828ecaee48cd297ea3bb560bc91dee7cf6082421151e4fb989535e412f298602038dec6c1d094302000000d86c19880f4392c009a1577a28242dade2c1f533f667b6e28a968aeceabf752fb580f27c890ec659c7da19e8fc46808aaacaa2a69b220710c295f5d7678c4e223dd5ceb6a66b035dcec714b4ed24872804b718b6e1c8c103a44efe754ce1299928254686f107fccc76e95209b2e53912576d4690d87cf29155763c4f655e804d3288d4f383cce3e0ae72f6d81bd48e61501023aa6fd5d1b0db546c78887e9edb37a9a5807909925c3c1e734f178476b5dcb50a977055f4e093ba22f91e5ef0", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 13:59:40 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:59:40 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x30000001c, 0x0) 13:59:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x301000000, 0x0) 13:59:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 54) 13:59:40 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:40 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:40 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300001c00, 0x0) 13:59:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x302000000, 0x0) 13:59:40 executing program 6: syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000100), 0x180010, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) fallocate(r0, 0x10, 0x101, 0x8000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x4022812, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000300)=0x101) chroot(&(0x7f0000000280)='./file2\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="07275f9078d7fb00"/18, @ANYRES32, @ANYBLOB="01000100000000002e2f66696c65302f66696c653000"]) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r1, &(0x7f0000000380)="0249e99a7f0211ef77a2e6ddf80889819eecd945439d8a17fd966a028b5a0d7d6da10a8b16bf2bf2b67ed8b591", 0x2d) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x20a700, 0x0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000002e00)={0x0, "d7885b01064cde863ef84a335a261f1b"}) r3 = socket(0x1d, 0x80003, 0x1) signalfd4(r3, &(0x7f0000000180)={[0x4]}, 0x8, 0x800) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendfile(r1, r2, 0x0, 0x100000001) [ 2855.517370] FAULT_INJECTION: forcing a failure. [ 2855.517370] name failslab, interval 1, probability 0, space 0, times 0 [ 2855.518609] CPU: 1 PID: 19924 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2855.519265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2855.520058] Call Trace: [ 2855.520311] dump_stack+0x107/0x167 [ 2855.520666] should_fail.cold+0x5/0xa [ 2855.521035] ? __request_module+0x2e0/0x920 [ 2855.521437] ? bprm_execve+0xbe6/0x1a60 [ 2855.521815] should_failslab+0x5/0x20 [ 2855.522170] kmem_cache_alloc_trace+0x55/0x320 [ 2855.522595] ? bprm_execve+0xbe6/0x1a60 [ 2855.522976] __request_module+0x2e0/0x920 [ 2855.523361] ? perf_trace_lock+0xac/0x490 [ 2855.523768] ? free_modprobe_argv+0x90/0x90 [ 2855.524179] ? __lockdep_reset_lock+0x180/0x180 [ 2855.524627] ? find_held_lock+0x2c/0x110 [ 2855.525008] ? bprm_execve+0xa13/0x1a60 [ 2855.525375] ? lock_downgrade+0x6d0/0x6d0 [ 2855.525753] ? elf_core_dump+0x3c50/0x3c50 [ 2855.526140] ? do_raw_read_unlock+0x3b/0x70 [ 2855.526541] ? _raw_read_unlock+0x1a/0x30 [ 2855.526920] ? load_misc_binary+0x605/0xb70 [ 2855.527328] bprm_execve+0xbe6/0x1a60 [ 2855.527683] ? open_exec+0x70/0x70 [ 2855.528014] ? memcpy+0x39/0x60 [ 2855.528321] ? copy_string_kernel+0x3b6/0x450 [ 2855.528747] do_execveat_common+0x772/0x8d0 [ 2855.529146] ? bprm_execve+0x1a60/0x1a60 [ 2855.529532] __x64_sys_execveat+0xed/0x140 [ 2855.529927] do_syscall_64+0x33/0x40 [ 2855.530269] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2855.530734] RIP: 0033:0x7fac73041b19 [ 2855.531075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2855.532741] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2855.533438] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2855.534092] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2855.534737] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2855.535382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2855.536047] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 13:59:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 41) 13:59:55 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xb}, 0x480, 0x4, 0x2, 0x5, 0x8000, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f00000002c0)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd", 0x54, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000000140)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}, {&(0x7f0000000240)="c8496b515eec649d44d3b1b81644be679996ba3d455b51e943495f4aae66f684d2f3bed635a75d1d88cd16285cd0d5076d614ac621c2a25134d70d85203cd76196d333b1b03b66e77008c7bc679ee4c9340bb96e95eea0ff", 0x58, 0x7fffffff}], 0x0, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80000, 0x58) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1) 13:59:55 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:55 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 55) 13:59:55 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x308000000, 0x0) 13:59:55 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:59:55 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:55 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x301000000, 0x0) [ 2871.252947] FAULT_INJECTION: forcing a failure. [ 2871.252947] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.254919] CPU: 0 PID: 19956 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2871.256134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2871.257559] Call Trace: [ 2871.258039] dump_stack+0x107/0x167 [ 2871.258687] should_fail.cold+0x5/0xa [ 2871.259376] ? bprm_execve+0xbe6/0x1a60 [ 2871.260067] should_failslab+0x5/0x20 [ 2871.260750] __kmalloc_track_caller+0x79/0x370 [ 2871.261557] ? __request_module+0x2fe/0x920 [ 2871.262337] ? bprm_execve+0xbe6/0x1a60 [ 2871.263038] kstrdup+0x36/0x70 [ 2871.263613] __request_module+0x2fe/0x920 [ 2871.264353] ? free_modprobe_argv+0x90/0x90 [ 2871.265134] ? __lockdep_reset_lock+0x180/0x180 [ 2871.265976] ? find_held_lock+0x2c/0x110 [ 2871.266706] ? bprm_execve+0xa13/0x1a60 [ 2871.267408] ? lock_downgrade+0x6d0/0x6d0 [ 2871.268139] ? elf_core_dump+0x3c50/0x3c50 [ 2871.268879] ? do_raw_read_unlock+0x3b/0x70 [ 2871.269643] ? _raw_read_unlock+0x1a/0x30 [ 2871.270359] ? load_misc_binary+0x605/0xb70 [ 2871.271148] bprm_execve+0xbe6/0x1a60 [ 2871.271835] ? open_exec+0x70/0x70 [ 2871.272468] ? memcpy+0x39/0x60 [ 2871.273055] ? copy_string_kernel+0x3b6/0x450 [ 2871.273870] do_execveat_common+0x772/0x8d0 [ 2871.274628] ? bprm_execve+0x1a60/0x1a60 [ 2871.275389] __x64_sys_execveat+0xed/0x140 [ 2871.276136] do_syscall_64+0x33/0x40 [ 2871.276800] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2871.277677] RIP: 0033:0x7fac73041b19 [ 2871.278333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2871.281449] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2871.282783] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2871.284026] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2871.285281] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.286522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2871.287764] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 [ 2871.306401] FAULT_INJECTION: forcing a failure. [ 2871.306401] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.308449] CPU: 0 PID: 19953 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2871.309669] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2871.311117] Call Trace: [ 2871.311593] dump_stack+0x107/0x167 [ 2871.312264] should_fail.cold+0x5/0xa [ 2871.312968] should_failslab+0x5/0x20 [ 2871.313642] __kmalloc_track_caller+0x79/0x370 [ 2871.314443] ? bprm_change_interp+0x7c/0xf0 [ 2871.315224] kstrdup+0x36/0x70 [ 2871.315803] bprm_change_interp+0x7c/0xf0 [ 2871.316528] load_misc_binary+0x3a5/0xb70 [ 2871.317291] bprm_execve+0x969/0x1a60 [ 2871.317977] ? open_exec+0x70/0x70 [ 2871.318607] ? memcpy+0x39/0x60 [ 2871.319066] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz-executor.6: bad orphan inode 301979167 [ 2871.319186] ? copy_string_kernel+0x3b6/0x450 [ 2871.321130] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 2871.321592] do_execveat_common+0x772/0x8d0 [ 2871.323580] ? bprm_execve+0x1a60/0x1a60 [ 2871.324343] __x64_sys_execveat+0xed/0x140 [ 2871.325129] do_syscall_64+0x33/0x40 [ 2871.325776] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2871.326673] RIP: 0033:0x7fde11765b19 [ 2871.327317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2871.330516] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2871.331820] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2871.333073] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2871.334322] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.335566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2871.336825] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 13:59:55 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x302000000, 0x0) 13:59:55 executing program 6: ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0017004000"/16]) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r1, 0xabd1, 0x0, 0x635a, 0x4}, 0x10000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000200)=ANY=[@ANYRESHEX]}) 13:59:56 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:56 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 13:59:56 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 13:59:56 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x310000000, 0x0) 13:59:56 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 13:59:56 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 42) [ 2871.647758] FAULT_INJECTION: forcing a failure. [ 2871.647758] name failslab, interval 1, probability 0, space 0, times 0 [ 2871.649321] CPU: 0 PID: 19984 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2871.650250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2871.651364] Call Trace: [ 2871.651727] dump_stack+0x107/0x167 [ 2871.652236] should_fail.cold+0x5/0xa [ 2871.652771] ? create_object.isra.0+0x3a/0xa20 [ 2871.653396] should_failslab+0x5/0x20 [ 2871.653924] kmem_cache_alloc+0x5b/0x310 [ 2871.654490] create_object.isra.0+0x3a/0xa20 [ 2871.655082] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2871.655766] __kmalloc_track_caller+0x177/0x370 [ 2871.656399] ? bprm_change_interp+0x7c/0xf0 [ 2871.657014] kstrdup+0x36/0x70 [ 2871.657458] bprm_change_interp+0x7c/0xf0 [ 2871.657993] load_misc_binary+0x3a5/0xb70 [ 2871.658576] bprm_execve+0x969/0x1a60 [ 2871.659107] ? open_exec+0x70/0x70 [ 2871.659589] ? memcpy+0x39/0x60 [ 2871.660042] ? copy_string_kernel+0x3b6/0x450 [ 2871.660685] do_execveat_common+0x772/0x8d0 [ 2871.661280] ? bprm_execve+0x1a60/0x1a60 [ 2871.661859] __x64_sys_execveat+0xed/0x140 [ 2871.662451] do_syscall_64+0x33/0x40 [ 2871.662961] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2871.663646] RIP: 0033:0x7fde11765b19 [ 2871.664153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2871.666595] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2871.667613] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2871.668570] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2871.669532] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2871.670495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2871.671436] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:00:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 56) 14:00:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 43) 14:00:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:00:09 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:09 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x308000000, 0x0) 14:00:09 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x31c000000, 0x0) 14:00:09 executing program 6: r0 = syz_io_uring_setup(0x7f02, &(0x7f0000000240), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000580)={0x8, 0x2, {0xffffffffffffffff, 0x0, 0x20000, 0x3, 0xffffffff}, 0xfcb5}) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = gettid() kcmp(0x0, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r5, r6, 0x18) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x0, 0x81, 0xff, 0x80, 0x0, 0x0, 0xa00, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100)}, 0x15, 0x1, 0x9, 0x4, 0x2, 0x0, 0x8000, 0x0, 0x4, 0x0, 0x1ff}, r5, 0xa, r4, 0x2) io_uring_enter(r0, 0x7e66, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x3) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x181082, 0x0) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x3, 0x7, 0x3f, 0x5, 0x0, 0xc6fe, 0x20, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8}, 0x8000, 0x4, 0x16c4e5b3, 0x5, 0xfffffffffffffe00, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0x7, r9, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x100010, r10, 0x0) 14:00:09 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2884.929652] FAULT_INJECTION: forcing a failure. [ 2884.929652] name failslab, interval 1, probability 0, space 0, times 0 [ 2884.931926] CPU: 0 PID: 19991 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2884.933294] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.934905] Call Trace: [ 2884.935435] dump_stack+0x107/0x167 [ 2884.936169] should_fail.cold+0x5/0xa [ 2884.936934] ? getname_kernel+0x4e/0x370 [ 2884.937743] should_failslab+0x5/0x20 [ 2884.938500] kmem_cache_alloc+0x5b/0x310 [ 2884.939327] getname_kernel+0x4e/0x370 [ 2884.940108] open_exec+0x13/0x70 [ 2884.940784] load_misc_binary+0x973/0xb70 [ 2884.941632] bprm_execve+0x969/0x1a60 [ 2884.942398] ? open_exec+0x70/0x70 [ 2884.943024] ? memcpy+0x39/0x60 [ 2884.943607] ? copy_string_kernel+0x3b6/0x450 [ 2884.944411] do_execveat_common+0x772/0x8d0 [ 2884.945177] ? bprm_execve+0x1a60/0x1a60 [ 2884.945924] __x64_sys_execveat+0xed/0x140 [ 2884.946669] do_syscall_64+0x33/0x40 [ 2884.947315] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2884.948200] RIP: 0033:0x7fde11765b19 [ 2884.948867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2884.951992] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2884.953316] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2884.954537] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2884.955756] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.956994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2884.958221] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2884.982493] FAULT_INJECTION: forcing a failure. [ 2884.982493] name failslab, interval 1, probability 0, space 0, times 0 [ 2884.984605] CPU: 0 PID: 20004 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2884.985791] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.987201] Call Trace: [ 2884.987666] dump_stack+0x107/0x167 [ 2884.988325] should_fail.cold+0x5/0xa [ 2884.988999] ? create_object.isra.0+0x3a/0xa20 [ 2884.989792] should_failslab+0x5/0x20 [ 2884.990450] kmem_cache_alloc+0x5b/0x310 [ 2884.991177] create_object.isra.0+0x3a/0xa20 [ 2884.991936] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2884.992824] __kmalloc_track_caller+0x177/0x370 [ 2884.993624] ? __request_module+0x2fe/0x920 [ 2884.994385] ? bprm_execve+0xbe6/0x1a60 [ 2884.995073] kstrdup+0x36/0x70 [ 2884.995634] __request_module+0x2fe/0x920 [ 2884.996368] ? free_modprobe_argv+0x90/0x90 [ 2884.997121] ? __lockdep_reset_lock+0x180/0x180 [ 2884.997947] ? find_held_lock+0x2c/0x110 [ 2884.998662] ? bprm_execve+0xa13/0x1a60 [ 2884.999352] ? lock_downgrade+0x6d0/0x6d0 [ 2885.000064] ? elf_core_dump+0x3c50/0x3c50 [ 2885.000803] ? do_raw_read_unlock+0x3b/0x70 [ 2885.001548] ? _raw_read_unlock+0x1a/0x30 [ 2885.002262] ? load_misc_binary+0x605/0xb70 [ 2885.003044] bprm_execve+0xbe6/0x1a60 [ 2885.003732] ? open_exec+0x70/0x70 [ 2885.004346] ? memcpy+0x39/0x60 [ 2885.004939] ? copy_string_kernel+0x3b6/0x450 [ 2885.005741] do_execveat_common+0x772/0x8d0 [ 2885.006494] ? bprm_execve+0x1a60/0x1a60 [ 2885.007237] __x64_sys_execveat+0xed/0x140 [ 2885.007981] do_syscall_64+0x33/0x40 [ 2885.008629] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2885.009513] RIP: 0033:0x7fac73041b19 [ 2885.010169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2885.013263] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2885.014565] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2885.015782] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2885.017002] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2885.018222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2885.019453] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 14:00:09 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x310000000, 0x0) 14:00:09 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:09 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:00:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x700, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:00:09 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x2) 14:00:09 executing program 6: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x248e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x444002, 0x2}, 0x18) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={{}, {0x77359400}}) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000f80)='./file1\x00', 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)=ANY=[@ANYBLOB="0110bd000100", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) r3 = fsmount(0xffffffffffffffff, 0x1, 0x71) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000010c0)) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000500)={0x1, 0x9, @start={0x0, 0x1, "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", "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"}, [0x100000000, 0x3ff, 0x6, 0x0, 0x0, 0x8001, 0x3ff, 0x3f, 0x7, 0x27a, 0x10001, 0x4, 0x8001, 0x7c1b, 0xfff, 0x3, 0x80, 0x1, 0x8, 0x101, 0x7fffffff, 0x8, 0x400, 0x7, 0x2, 0x9, 0x0, 0x0, 0x4, 0x2, 0x7fff, 0x8, 0x0, 0x117e, 0x7ff, 0xfffffffffffffffd, 0x7, 0x10001, 0xd56, 0x7, 0xa58f, 0x8, 0x400, 0x700000000, 0x7, 0xfffffffffffff801, 0x1, 0x87, 0xd6e3, 0x8, 0x6, 0x4, 0x6, 0xfffffffffffffff8, 0x6, 0x2, 0xffffffff, 0xffffffffffffff01, 0x9d36, 0x0, 0x800001ff, 0xfde3, 0x0, 0x7]}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) mq_open(&(0x7f0000005c00)='-@\x00', 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$cgroup(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x20, &(0x7f0000000fc0)=ANY=[@ANYBLOB='cpuset_v2_mode,noprefix,clone_children,all,none,clone_children,mask=MAY_EXEC,obj_role=-@\x00,defcontext=sysadm_u,fsnam\x00,uid=\x00'/137, @ANYRESDEC=r4, @ANYBLOB=',euid>', @ANYRESDEC=0xee01, @ANYBLOB=',seclabel,\x00']) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000040780971bf8800000000002e2f"]) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000004c0)={0x20000002}) 14:00:09 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2885.188738] cgroup: Unknown subsys name 'mask' 14:00:09 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2885.226531] cgroup: Unknown subsys name 'mask' 14:00:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 57) 14:00:24 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:00:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 44) 14:00:24 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:00:24 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x31c000000, 0x0) 14:00:24 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x8) 14:00:24 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:24 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x101002) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00002756f17767852cce36e4000000000000000000"], 0x725) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000680)=""/4091, 0xffb}], 0x1) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) [ 2900.152087] FAULT_INJECTION: forcing a failure. [ 2900.152087] name failslab, interval 1, probability 0, space 0, times 0 [ 2900.154140] CPU: 0 PID: 20035 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2900.155299] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2900.156673] Call Trace: [ 2900.157140] dump_stack+0x107/0x167 [ 2900.157773] should_fail.cold+0x5/0xa [ 2900.158424] ? create_object.isra.0+0x3a/0xa20 [ 2900.159196] ? create_object.isra.0+0x3a/0xa20 [ 2900.159971] should_failslab+0x5/0x20 [ 2900.160618] kmem_cache_alloc+0x5b/0x310 [ 2900.161328] create_object.isra.0+0x3a/0xa20 [ 2900.162071] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2900.162963] kmem_cache_alloc+0x159/0x310 [ 2900.163677] getname_kernel+0x4e/0x370 [ 2900.164362] open_exec+0x13/0x70 [ 2900.164936] load_misc_binary+0x973/0xb70 [ 2900.165688] bprm_execve+0x969/0x1a60 [ 2900.166373] ? open_exec+0x70/0x70 [ 2900.167014] ? memcpy+0x39/0x60 [ 2900.167582] ? copy_string_kernel+0x3b6/0x450 [ 2900.168382] do_execveat_common+0x772/0x8d0 [ 2900.169131] ? bprm_execve+0x1a60/0x1a60 [ 2900.169877] __x64_sys_execveat+0xed/0x140 [ 2900.170627] do_syscall_64+0x33/0x40 [ 2900.171260] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2900.172146] RIP: 0033:0x7fde11765b19 [ 2900.172779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2900.175949] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2900.177271] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2900.178493] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2900.179716] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2900.180939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2900.182166] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2900.200998] FAULT_INJECTION: forcing a failure. [ 2900.200998] name failslab, interval 1, probability 0, space 0, times 0 [ 2900.202021] CPU: 1 PID: 20050 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2900.202596] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2900.203267] Call Trace: [ 2900.203490] dump_stack+0x107/0x167 [ 2900.203793] should_fail.cold+0x5/0xa [ 2900.204108] ? call_usermodehelper_setup+0xa2/0x2f0 [ 2900.204516] should_failslab+0x5/0x20 [ 2900.204829] kmem_cache_alloc_trace+0x55/0x320 [ 2900.205213] call_usermodehelper_setup+0xa2/0x2f0 [ 2900.205601] ? copy_regset_to_user+0x170/0x170 [ 2900.205973] ? bprm_execve+0xbe6/0x1a60 [ 2900.206294] __request_module+0x3f9/0x920 [ 2900.206627] ? perf_trace_lock+0xac/0x490 [ 2900.206959] ? free_modprobe_argv+0x90/0x90 [ 2900.207306] ? __lockdep_reset_lock+0x180/0x180 [ 2900.207685] ? find_held_lock+0x2c/0x110 [ 2900.208016] ? bprm_execve+0xa13/0x1a60 [ 2900.208341] ? lock_downgrade+0x6d0/0x6d0 [ 2900.208674] ? elf_core_dump+0x3c50/0x3c50 [ 2900.209029] ? do_raw_read_unlock+0x3b/0x70 [ 2900.209381] ? _raw_read_unlock+0x1a/0x30 [ 2900.209714] ? load_misc_binary+0x605/0xb70 [ 2900.210068] bprm_execve+0xbe6/0x1a60 [ 2900.210382] ? open_exec+0x70/0x70 [ 2900.210669] ? memcpy+0x39/0x60 [ 2900.210935] ? copy_string_kernel+0x3b6/0x450 [ 2900.211302] do_execveat_common+0x772/0x8d0 [ 2900.211652] ? bprm_execve+0x1a60/0x1a60 [ 2900.211993] __x64_sys_execveat+0xed/0x140 [ 2900.212334] do_syscall_64+0x33/0x40 [ 2900.212633] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2900.213042] RIP: 0033:0x7fac73041b19 [ 2900.213350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2900.214818] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2900.215432] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2900.216002] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2900.216571] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2900.217145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2900.217717] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 14:00:40 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ftruncate(r0, 0xffff) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r1, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(r1, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup2(0xffffffffffffffff, r3) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x6ac1) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000200)={0x2, 0x3ff, @start={0x0, 0x1, "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", "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"}, [0x7, 0xe2, 0x0, 0x0, 0x6, 0x0, 0x7, 0xfffffffffffffffd, 0xfff, 0x488e, 0x9, 0x3ff, 0x2, 0x0, 0x8, 0x0, 0x2111, 0x0, 0x5ed914f4, 0x1, 0x0, 0x401, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1800000000, 0x0, 0x0, 0x0, 0x64f, 0x20, 0x0, 0x0, 0x7f, 0xfffffffffffffe01, 0x2, 0x352f, 0xfffffffffffff85b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0xc5, 0x3ff, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xae, 0x9, 0xe29c]}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) 14:00:40 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 58) 14:00:40 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x2) 14:00:40 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x10) 14:00:40 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:00:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 45) 14:00:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xb00, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2916.367001] FAULT_INJECTION: forcing a failure. [ 2916.367001] name failslab, interval 1, probability 0, space 0, times 0 [ 2916.368294] CPU: 0 PID: 20062 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2916.369030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2916.369934] Call Trace: [ 2916.370229] dump_stack+0x107/0x167 [ 2916.370637] should_fail.cold+0x5/0xa [ 2916.371062] ? call_usermodehelper_setup+0xa2/0x2f0 [ 2916.371598] should_failslab+0x5/0x20 [ 2916.372013] kmem_cache_alloc_trace+0x55/0x320 [ 2916.372512] call_usermodehelper_setup+0xa2/0x2f0 [ 2916.373034] ? copy_regset_to_user+0x170/0x170 [ 2916.373536] ? bprm_execve+0xbe6/0x1a60 [ 2916.373963] __request_module+0x3f9/0x920 [ 2916.374414] ? free_modprobe_argv+0x90/0x90 [ 2916.374880] ? __lockdep_reset_lock+0x180/0x180 [ 2916.375398] ? find_held_lock+0x2c/0x110 [ 2916.375843] ? bprm_execve+0xa13/0x1a60 [ 2916.376276] ? lock_downgrade+0x6d0/0x6d0 [ 2916.376719] ? elf_core_dump+0x3c50/0x3c50 [ 2916.377185] ? do_raw_read_unlock+0x3b/0x70 [ 2916.377649] ? _raw_read_unlock+0x1a/0x30 [ 2916.378097] ? load_misc_binary+0x605/0xb70 [ 2916.378575] bprm_execve+0xbe6/0x1a60 [ 2916.379006] ? open_exec+0x70/0x70 [ 2916.379391] ? memcpy+0x39/0x60 [ 2916.379751] ? copy_string_kernel+0x3b6/0x450 [ 2916.380246] do_execveat_common+0x772/0x8d0 [ 2916.380723] ? bprm_execve+0x1a60/0x1a60 [ 2916.381200] __x64_sys_execveat+0xed/0x140 [ 2916.381673] do_syscall_64+0x33/0x40 [ 2916.382072] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2916.382621] RIP: 0033:0x7fac73041b19 [ 2916.383038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2916.384980] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2916.385801] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2916.386552] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2916.387303] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2916.388070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2916.388822] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 14:00:41 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1c) 14:00:41 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:00:41 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2916.408198] FAULT_INJECTION: forcing a failure. [ 2916.408198] name failslab, interval 1, probability 0, space 0, times 0 [ 2916.409392] CPU: 1 PID: 20071 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2916.410077] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2916.410888] Call Trace: [ 2916.411163] dump_stack+0x107/0x167 [ 2916.411538] should_fail.cold+0x5/0xa [ 2916.411923] ? __alloc_file+0x21/0x320 [ 2916.412312] should_failslab+0x5/0x20 [ 2916.412692] kmem_cache_alloc+0x5b/0x310 [ 2916.413111] __alloc_file+0x21/0x320 [ 2916.413493] alloc_empty_file+0x6d/0x170 [ 2916.413897] path_openat+0xe3/0x26e0 [ 2916.414276] ? lock_acquire+0x197/0x470 [ 2916.414683] ? path_lookupat+0x860/0x860 [ 2916.415115] do_filp_open+0x190/0x3e0 [ 2916.415501] ? may_open_dev+0xf0/0xf0 [ 2916.415879] ? lock_chain_count+0x20/0x20 [ 2916.416295] ? __lockdep_reset_lock+0x180/0x180 [ 2916.416761] ? lock_acquire+0x197/0x470 [ 2916.417183] ? lock_release+0x680/0x680 [ 2916.417587] ? find_held_lock+0x2c/0x110 [ 2916.418003] ? kmem_cache_alloc+0x159/0x310 [ 2916.418435] ? mark_held_locks+0x9e/0xe0 [ 2916.418854] do_open_execat+0x116/0x690 [ 2916.419256] ? trace_hardirqs_on+0x5b/0x180 [ 2916.419691] ? __do_sys_uselib+0x5e0/0x5e0 [ 2916.420120] ? memcpy+0x39/0x60 [ 2916.420464] open_exec+0x42/0x70 [ 2916.420803] load_misc_binary+0x973/0xb70 [ 2916.421239] bprm_execve+0x969/0x1a60 [ 2916.421639] ? open_exec+0x70/0x70 [ 2916.422003] ? memcpy+0x39/0x60 [ 2916.422342] ? copy_string_kernel+0x3b6/0x450 [ 2916.422798] do_execveat_common+0x772/0x8d0 [ 2916.423238] ? bprm_execve+0x1a60/0x1a60 [ 2916.423658] __x64_sys_execveat+0xed/0x140 [ 2916.424084] do_syscall_64+0x33/0x40 [ 2916.424453] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2916.424955] RIP: 0033:0x7fde11765b19 [ 2916.425337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2916.427153] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2916.427909] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2916.428617] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2916.429341] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2916.430052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2916.430756] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:00:41 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x8) 14:00:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:00:41 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:00:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x1100, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:00:41 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:57 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1c00) 14:00:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:00:57 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 46) 14:00:57 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:57 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x10) 14:00:57 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000240)=0x80000000, 0x2000) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r4, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) fallocate(r4, 0x10, 0x4, 0x3) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x10000004, 0x48042) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0x7, 0x80, 0x20, 0x0, 0x200, 0x62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000340), 0x1}, 0x200, 0xb5, 0x0, 0x26bf01e727e81b15, 0x102, 0x8dce, 0x6, 0x0, 0x1000, 0x0, 0x7}, 0x0, 0xc, 0xffffffffffffffff, 0xa) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file1\x00') ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x8) fallocate(r5, 0x14, 0x20000000000, 0x400000009) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r1, 0x0) r6 = fcntl$dupfd(r1, 0x406, r3) write$binfmt_aout(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/864], 0x35a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$LOOP_GET_STATUS(r7, 0x4c03, &(0x7f0000000180)) 14:00:57 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 59) 14:00:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x12c4, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:00:57 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1000000) [ 2932.815782] FAULT_INJECTION: forcing a failure. [ 2932.815782] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.817705] CPU: 0 PID: 20104 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2932.818844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.820057] Call Trace: [ 2932.820458] dump_stack+0x107/0x167 [ 2932.821018] should_fail.cold+0x5/0xa [ 2932.821602] ? create_object.isra.0+0x3a/0xa20 [ 2932.822286] should_failslab+0x5/0x20 [ 2932.822854] kmem_cache_alloc+0x5b/0x310 [ 2932.823473] create_object.isra.0+0x3a/0xa20 [ 2932.824131] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2932.824898] kmem_cache_alloc+0x159/0x310 [ 2932.825538] __alloc_file+0x21/0x320 [ 2932.826108] alloc_empty_file+0x6d/0x170 [ 2932.826724] path_openat+0xe3/0x26e0 [ 2932.827291] ? lock_acquire+0x197/0x470 [ 2932.827904] ? path_lookupat+0x860/0x860 [ 2932.828522] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2932.829268] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2932.830032] do_filp_open+0x190/0x3e0 [ 2932.830600] ? may_open_dev+0xf0/0xf0 [ 2932.831173] ? lock_chain_count+0x20/0x20 [ 2932.831795] ? __lockdep_reset_lock+0x180/0x180 [ 2932.832487] ? lock_acquire+0x197/0x470 [ 2932.833099] ? lock_release+0x680/0x680 [ 2932.833700] ? find_held_lock+0x2c/0x110 [ 2932.834322] ? kmem_cache_alloc+0x159/0x310 [ 2932.835006] ? mark_held_locks+0x9e/0xe0 [ 2932.835650] do_open_execat+0x116/0x690 [ 2932.836270] ? trace_hardirqs_on+0x5b/0x180 [ 2932.836942] ? __do_sys_uselib+0x5e0/0x5e0 [ 2932.837626] ? memcpy+0x39/0x60 [ 2932.838161] open_exec+0x42/0x70 [ 2932.838691] load_misc_binary+0x973/0xb70 [ 2932.839358] bprm_execve+0x969/0x1a60 [ 2932.839974] ? open_exec+0x70/0x70 [ 2932.840529] ? memcpy+0x39/0x60 [ 2932.841052] ? copy_string_kernel+0x3b6/0x450 [ 2932.841785] do_execveat_common+0x772/0x8d0 [ 2932.842468] ? bprm_execve+0x1a60/0x1a60 [ 2932.843141] __x64_sys_execveat+0xed/0x140 [ 2932.843814] do_syscall_64+0x33/0x40 [ 2932.844395] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2932.845188] RIP: 0033:0x7fde11765b19 [ 2932.845779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.848586] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2932.849826] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2932.850929] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2932.852029] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.853125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2932.854232] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:00:57 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xc412, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:00:57 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:00:57 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2932.965724] FAULT_INJECTION: forcing a failure. [ 2932.965724] name failslab, interval 1, probability 0, space 0, times 0 [ 2932.967216] CPU: 0 PID: 20110 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2932.968097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2932.969148] Call Trace: [ 2932.969511] dump_stack+0x107/0x167 [ 2932.969997] should_fail.cold+0x5/0xa [ 2932.970496] ? load_elf_phdrs+0x10c/0x230 [ 2932.971034] should_failslab+0x5/0x20 [ 2932.971526] __kmalloc+0x72/0x390 [ 2932.971986] load_elf_phdrs+0x10c/0x230 [ 2932.972500] ? set_brk+0x180/0x180 [ 2932.972973] load_elf_binary+0x1ff/0x5730 [ 2932.973533] ? __lockdep_reset_lock+0x180/0x180 [ 2932.974147] ? lock_acquire+0x197/0x470 [ 2932.974659] ? find_held_lock+0x2c/0x110 [ 2932.975201] ? bprm_execve+0xc79/0x1a60 [ 2932.975721] ? elf_core_dump+0x3c50/0x3c50 [ 2932.976253] ? do_raw_read_unlock+0x3b/0x70 [ 2932.976813] ? _raw_read_unlock+0x1a/0x30 [ 2932.977336] ? load_misc_binary+0x605/0xb70 [ 2932.977922] bprm_execve+0xc9a/0x1a60 [ 2932.978440] ? open_exec+0x70/0x70 [ 2932.978904] ? memcpy+0x39/0x60 [ 2932.979334] ? copy_string_kernel+0x3b6/0x450 [ 2932.979936] do_execveat_common+0x772/0x8d0 [ 2932.980499] ? bprm_execve+0x1a60/0x1a60 [ 2932.981052] __x64_sys_execveat+0xed/0x140 [ 2932.981628] do_syscall_64+0x33/0x40 [ 2932.982110] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2932.982754] RIP: 0033:0x7fac73041b19 [ 2932.983237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2932.985559] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2932.986534] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2932.987446] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2932.988354] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2932.989261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2932.990174] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 14:00:57 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1c) 14:00:57 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:01:12 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x2000000) 14:01:12 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:01:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:01:12 executing program 6: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1af982, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@local, r3}, 0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xec, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xbc733e8610f7b9c6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x50, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x810}, 0x20040044) r4 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = gettid() kcmp(0x0, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r6 = socket(0x1, 0x6, 0xfff) sendmsg$nl_generic(r6, &(0x7f0000002480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002440)={&(0x7f0000000340)={0x20d8, 0x38, 0x2, 0x70bd2b, 0x25dfdbfc, {0x12}, [@typed={0x14, 0x8, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}, @generic="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", @generic="09ec09cfdf3b3e9c58fa8f04c2b09b116507ffd583257fd49e0e0e0f5f96615a50e95b09c0cbfd4dbd26460cefa844e42b61550cfcdf713a0d135957e822eabca972f56c1cb2d75813ac5d2994480d1b252ced53829f4f2b2649867e87ffdb392ac3ad790e258df8fe6998df6ecf99fef2ac77cb00b8d7565c4896e7eaa22a928052fd59767fbd3c0c386df7826ddc8b988e9d91351f439211f7c6b99a10a548298f0149e38962e17bc474f10ebbceb84ac7b2ef15e2cf800e23d0f853c49813913b9a3bd2f5adaf97fc2fa5929d44fe66de86ea9be5a0e55adcaf244fcd980d7e670e94066ac60870886744c55491857202ce7e81dbc2e6f622ce953e61898c8772137ca6bca0c615cc074a445c05b9bee28b9058af8897b41722963604c094836b8758b8b8cc1e79cad5b330f245ae75dc608c6e654816cae31af05d8aeb2f5427564ab47c045095b8395def53d60d29424c9a20c7b6db9301d315e1f91afe7984354efdd4c319e50424a86076ab1fb7e6ba9deda09aeac831aaeeb27b2f19dc1d0871c1aca7643aa997e524212d0be5aac75b0ab6893bdf8a46cc33d438fba93ead0937a6bba62a84c0c3bcd6c2c6d81a035793a90375f5e13cb79ae0b2f3616b297bd6808879c9c0eb56c3418642f2fb8f0ee7b42a88432b61b4d5f9b2570e53f0c77fedbe77fdfbe572ecce8cf89690a3947425297e146baa4310e64053d34236f9b10c7eda44415a63e8a6e4cba4b7a64714930ad60dff8cddc25642e8a5015375f7cdfc893ddb939a727dc98b9f16bd9eb1097146552e4551397853d6868e5dbc69f001e7b86003cfcac7577ced7316afad7825f5c99983dab7e3a2e0f932112cd55e630ed5230596c57d0b8005785ab8737ca96227f413833fc1d1fb0812ef7b68ebed58110e3d9997f65f5a7b322a055132e7b477940080070fded67dda16e30ee10e9ce73cb4db1541ef5e28979230a887d1e2f0b00348c39810ec898593117c21a102df8dc0ab8634dea59fd8362934add6e4c15fa8d6f9edd40794f055058ea5f136c0b122e422b2844ae6ace426e7c27fcf6fc4b480829117b68798da861ed606a442885db9ffdf9f8b1b85324cdb818c8cfe1439ad2780ba75073ff3783dc242a1d33da51f7b0754a9c62bebef5a98b35765ed00e2680b8a47f2aeaac3097712e1cfbd730aa6cafdc5d8550dde972bd6f70a87f541315453dfee01efbc6c4e3f3ac1d0e3c736bd9d60c284c36adc5ef51826f7b93b9a86118fec8cd113703f9b222cfda74476857046d7699f5ee0b101b83c2cfe9b248226b481d17dde8155837d6db1f1f0d3de1c0718ca7536aac4bda29dbb5295d42f3f69e35de58f046ca0b7e6155963be6eb7c7d3432381b1170c6933897c7327b54ebbc3a84af8d6db11118d5944cdf826f8b9b15c4b5fbb17e0d1c1067e56b85bae2d8993b51ccca269a9542f8771574557efd08aef6d2f214bfb867f40f799b2d300f6440108cd63fa564dea6bfdeeadc3ac71964eda2d674a86cc34f17b182d5f63fcb7f26adc190fb0534b5fecb1f40321d895431fe932f6264c7a0084f1e71ed0080f4ebeeb15061a3964eadde81620f8979549045076244c3a4eaea61d79a5426116faba37d9e733f3b9922cb86311b1a5a92b821ce186f051724ee0bcc95bf7d53525084ee299ba183ffbc9627cff142797812b57a74a4c16f08ba9d376be153a2af64b950ed393c5a2511813e0b044e13d15580caecec8abfa9998249069c0dac2bf8c6c9f701d787123146a8710c9ededad9b2bbd9088a58ed94bdcd6fd7694c83f5941cab3c80d75e19397a8b9d6c51bc35ea39e845a5a57774a0a6732e075649c6c8fd0242b89472bc72b775773d92c6e35b6a348bbb5f5c065ebc2b5589cc69cdc7f1e9e0a37ee18142d9c78460fe1ddd92d5ce87f7408cce27dc8ab8bb9b21b61f5efd738afa933ff6490723a563b5b2a3f78a2042f7312115ea28c27388a0d86c79318f789e06d29ae72226b6d4c065552ea314d20f49bfb3743ab045f506c34fa2fc255aec47df5abba8f344ce213bc3424daa4410d812d1eb55cee161754ee7996e20c1df9b8c26670d6819afd94d3aa8b27f98a7edeeb9e246f9cd1b3508598a7d1fbc5533f0f1d95d7412a79219f3d6d58ac49770c4897913b929b6acb2ff1ae3afd3a977fad2af8de154009ffea1efe6c5083600bb6c3d6119d33aaabc8cb44566b6fb3ba36b8c22e052498e54e849b3a57b506ba527d7a321a1b24244411c7b4d615f9c2b88ce37c66b4e82557f360ef5f11b544d16fdcca01dac5fda97b97063caffc792327d5b87b15a9204b8341eb5db8f0a1ccb23791687e5744288e3aceefef9b7001bf214ffdbd86653aee1219e52c7b5b86570dd51f225fb7e26e629b84987fe04cf03a64839aa36f5567f0550fcfae486edcca8a97449ba1ffd23b3f13082beb69433eaef3835f1ca5649ee31c5bcba0d63c0cb2389895b8ccac91be1ab31daa974fafd61445fd356d671e98226d1434fcd8798cac764f826f82d62871eb45406ec496a5622a1c9623d63cfb50eec6415223e90d183f375494f9f19132f3d4781e96731bf3da4803b777990c0166094cdfc7228308c8e32451edf4b9b3c9d81a24d98d432008c9c04f01a1505a65ee459e8e895a102ff4426622a728fdd4f349dc7929b28f1d9e24a04800f160942747848b5ab62ee0b215af1ba76c75a5e3b7cd4409ab6a94ec8dfaccd7f583e5af005bc3747aecc45a63e5598c1c51d344908923cf54e5000039e53f57e2108d65615e159bc51e36b60465453f2905b902aeadff4e04e1d2a0c5e17774406f861b3d490ccf65e67e91e5e3387d956cfdc9f44e485f7720859eea0bb7dedfde0e4e18e2dafbb43665b232309c2a7446e7ea09dfb668aed88f8a0cb6945c7a6a7f6c725f242185bb7a7f0a0fb9b848184aa788a7c3fa6ba816d40afe1f20eb1cb1d1c01643060feca62bcd9b5f4894d255a5186a759e63ad82e98362bf46a0022ad521b2b51420de8bd3f8b1fe3c9f8af1e49b70976c9e9a192edf60658ff8ab5de0aa0cb28ac6e53ac866efe59e6c60144e5d0046ba5fdac7c5009a4b56ff217c5f3534477624c68fb9319ec181ae0b7da8678d3f40db2ed4e9b1564548ec2e071816ff65edd02eaafdaab47c4593910d07888933ce17dbc7570187a6319de1f55bcf60e490b6823917c9541b45642f0bf71cfc6b5ccc236de3ccd4f55262c1e8584f4b5c1e7e9a803d81596e5362785eef9b081d3f7f4ed9d4089921f23943f53059e5a941fff3733189dff2d47083956ad6b59dd314081b96246fae9cd5a4e3ea7dc5b47632033dcea1b790de3b9e3a5c680fc6191b55eadc9935b9f86b02e689a1f1e4014bd9fd04590539e7b78c486b44e6495b774bfb21f7ceedf98c8e503236bf59a585ded16dc3d851f7c1eb80d5fe417fcd7da02d3d80de88f1a0d26a612e2522cac228beec16ee8e0409c8fa97840ec28b972d904f09334012db13f9c347f61699500a231650d4fe6e45c12250f48f28177deeccce9ef2b56da628b8548b14e4e9fcf78edd071d2e13a642c4ac28136a8ffb4b6fc611952c11c84ade0c52e070e548907dd0c9256012a3360678e2721ab0037e9ab922c0b05063efddc04db1a4e35db504de3a4dd94af7f346a4dd5834ae22d293391200533244f69fd3b3e38503ba939a017a5ded4309d26dd838c6242b96b8a228da58956fbd4aed533e430b7a5080071c0d355f2d3f52edf068585993dada6409bbed62b45136f8baca6907ce17f1ca0630b0873612d635d9dafab9c44d9bb3dc6ce3f93d1472bc40ec41478fba24ccfbd8df261dc4f57882cca3c486774512414ed5342f07339d1b493a23e26922008800076fdf9cccf79533de63b53469390277b663f619a3a1cc5ca71aeefdb7b633be839021ceba761654d2ce44c4c3bc8f7752732d3523a1fae1708a8f568a05a165d216da1c46f2469992204c131d7a2f270e6d4c41ab4f1c784860ebdead7b446e9e0644e170f7664a817fbbbf240c0565e07e762bed4e1504c2e9eb305be95c8e2d45b8614feebbcf1f3f5227277666d570af4f05f22bbc2494e4a2c517f5238248abf8e81b39885c5b828ac92a550fb62e289871348246d6129959864e0bede8adc2d238e7a1cf70673c1cd73288ef75de4d5cdaf6c1b39e8e70ecc88b6a5493fcc134db4ecf2550b25b62e4a401653092d89120ab7e1974b0a50f60744a6b4787bdecbb4f9ee20192969a2e6543f857ee01fb6eedfe2e548c83e99306d7fcdbc8ae25e19a79a00ddc74988f2af43611467530f4381ca53b779c916c82afd37d05577cf62fba2608a3fb21bce6da0ed4a5e5f2ee16093a3daf2c70563634cb04257cb30e63fb44aca060ddd9aa7c1a36230bac6c9ac5827a2e6a7bb24d02132294f425b8f09a77286f52e537a021faf2ba3e0e02405b419b400487e3a4f7408b368353860c6b0d2f3e45e82060d018e433980fe8c5dc873a003ee03fcd088f5c8f781f8cb8d85f9f0ac0bb2c19881eed3cdf06c9d7ba55b2f66af6af7133024c6322562f47cef97ac2b907a56ab444ac296c7e7ec8a20d685b2dace3ebc10e9b8fc017e40d9be772ce437feac47e0559a93c0f23b40a684b0960ad8cf96b74a8de2413d2a3c7d9280e51d18447e244dfd406c2989eda65e2556b2fbc5b26cd16386439256cbbe848fffe13d67fc4fea9b2345eb0934b03602c866544bd6fdb15438581bee6ab3d18a06560da8f39ab82681b9656af3058ebc68f5d9590de3a9dc745d967e3b0195448732e3e6fdc796696c229485aea7be8b3fea8703c4286cd09955a55f586f5d3bb8c17a55dd41f4ef983c4fed529e355902a23969ca43eb6eb78797fdf2b2608b9bbfd054cd36d70db05a40ddacddd2289f6f1171576164b33f54155b7928a74f148911e26d70972fcb228495a04f28e5f657f1e9a8e368c5821549ab851fe69ebe5f6d638fa773cc328324c665472f90b27cacef6b167b31b7b74f6c5837bd0882537e014e8e153f53bfe099357656799fa195cef9b7540a109e11167c42b183db750d3bdc1575feeca84e4a4862f98ed0f5e8820ea0b85669ff0ae4e754d95f6c7b4cb88b5c6c9173ff36fbd1400ca9c89f966b28c1474308dfd31d04f3e34605e1e888ac7ef8112f83a128488ec91f1d9dfb1ee425a7fbd13b8590380f31ee4d4ba8f4a4a162cb2fb83705e2fc3a5ff2ce34ed929d944cbac9128f91ad584b56e04ce13b6db62c298e5144461a65572346e4b0760f6026501be94a752f64c746e2d92391068d18a42f781b1f82dcb78792b361666623ff54f3935b4683431d44786e0eeb3726a25670a1a763f8bffa8cb25c4dec85707b4e2b4ea24c6f47dbac753e356149fa49322444bb11a36713b7fd4a814173544764c6b45d88dd22821a09f841134489fad1f88aab3752c8745ea9b3b94cc5ce72006ae92808bf8fddc6df923072644b5c275c2a4b8b7c156f6a453ad36fc5da5ed2a129736963d0f1b6d0e4048f66be97af2259b0c353193a08f1b7aae57de27e64b1ea6cd6cd1ec8f05b05e75eceb0cb31cc34ca406e01fa54a1978fe25605ab134ba691c9c47640a6006738785ab41606203405952059c13130494ac4d54a3a89c00c8c45eb6eec8a173dd2780c68cc48e4a187f223ba94a1dde69d4c0de7167e597ed07a6cce957901f890b35b55bc2ba4d0f5e98bec45cf7de22852d695de29fe7e9459d4744bba6d072974c39330c59f08fb702e87e73acdf6959", @typed={0x4, 0x81}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x9}, @generic="c002ba40fcb2de186d3cc0d3360c081f0f525215e7f2850424a63befd56ed95f31366c87273488497b2e846896185053e1ec34a6ee9cfdd60935cafedbbe370df25c038d5f374d6f4bf063d83b06b7cdf16b30c22cfc05befcee8dd049817252aba4ca12c2f19cd7e65915a12dc5ef779aa4a4777e1d66e4ee03c7b8ff9cf9dbce5d93d390978665fa329b8e5c9ccf679ce2ae8451b1f0a7c8a852612081ff84"]}, 0x20d8}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) tgkill(r4, r5, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x4, 0x6, 0x9, 0x0, 0x80, 0x400, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x8}, 0x40, 0x1000, 0x7, 0x6, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x0, 0x72}, r5, 0x10, 0xffffffffffffffff, 0xa) 14:01:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xf000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:12 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 47) 14:01:12 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1c00) 14:01:12 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 60) 14:01:12 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1000000) [ 2947.869337] FAULT_INJECTION: forcing a failure. [ 2947.869337] name failslab, interval 1, probability 0, space 0, times 0 [ 2947.871351] CPU: 1 PID: 20154 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2947.872461] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2947.873799] Call Trace: [ 2947.874234] dump_stack+0x107/0x167 [ 2947.874832] should_fail.cold+0x5/0xa [ 2947.875461] ? security_file_alloc+0x34/0x170 [ 2947.876189] should_failslab+0x5/0x20 [ 2947.876807] kmem_cache_alloc+0x5b/0x310 [ 2947.877474] security_file_alloc+0x34/0x170 [ 2947.878189] __alloc_file+0xb7/0x320 [ 2947.878797] alloc_empty_file+0x6d/0x170 [ 2947.879457] path_openat+0xe3/0x26e0 [ 2947.880052] ? lock_acquire+0x197/0x470 [ 2947.880702] ? path_lookupat+0x860/0x860 [ 2947.881369] ? lock_chain_count+0x20/0x20 [ 2947.882078] do_filp_open+0x190/0x3e0 [ 2947.882695] ? may_open_dev+0xf0/0xf0 [ 2947.883323] ? lock_chain_count+0x20/0x20 [ 2947.883998] ? __lockdep_reset_lock+0x180/0x180 [ 2947.884756] ? mark_held_locks+0x9e/0xe0 [ 2947.885422] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2947.886281] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 14:01:12 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x80000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2947.887172] do_open_execat+0x116/0x690 [ 2947.887935] ? __do_sys_uselib+0x5e0/0x5e0 [ 2947.888626] ? memcpy+0x39/0x60 [ 2947.889165] open_exec+0x42/0x70 [ 2947.889721] load_misc_binary+0x973/0xb70 [ 2947.890403] bprm_execve+0x969/0x1a60 [ 2947.891027] ? open_exec+0x70/0x70 14:01:12 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, 0x0, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2947.891597] ? memcpy+0x39/0x60 [ 2947.892247] ? copy_string_kernel+0x3b6/0x450 [ 2947.892980] do_execveat_common+0x772/0x8d0 [ 2947.893688] ? bprm_execve+0x1a60/0x1a60 [ 2947.894369] __x64_sys_execveat+0xed/0x140 [ 2947.895055] do_syscall_64+0x33/0x40 [ 2947.895651] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2947.896468] RIP: 0033:0x7fde11765b19 [ 2947.897068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2947.899993] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2947.901209] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2947.902367] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2947.903521] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2947.904662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2947.905816] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:01:12 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r0, &(0x7f0000000380), 0x0, 0x80000, 0x0, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) flistxattr(r1, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = clone3(&(0x7f0000000140)={0x11060900, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = gettid() kcmp(0x0, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) tgkill(r2, r3, 0x18) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1, 0xab, 0x6, 0x3, 0x0, 0xfc5, 0x43020, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x20, 0x2fd}, 0x4001, 0x23bb, 0x2, 0x2, 0xff, 0x9c, 0x2, 0x0, 0x6, 0x0, 0x4be}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20018000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0}, 0x4004801) ftruncate(0xffffffffffffffff, 0x1000003) open(0x0, 0x1a30c1, 0x0) 14:01:12 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x3000000) 14:01:12 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2947.966487] FAULT_INJECTION: forcing a failure. [ 2947.966487] name failslab, interval 1, probability 0, space 0, times 0 [ 2947.967591] CPU: 0 PID: 20150 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2947.968257] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2947.969060] Call Trace: [ 2947.969322] dump_stack+0x107/0x167 [ 2947.969697] should_fail.cold+0x5/0xa [ 2947.970086] ? create_object.isra.0+0x3a/0xa20 [ 2947.970535] should_failslab+0x5/0x20 [ 2947.970918] kmem_cache_alloc+0x5b/0x310 [ 2947.971315] create_object.isra.0+0x3a/0xa20 [ 2947.971743] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2947.972245] __kmalloc+0x16e/0x390 [ 2947.972597] load_elf_phdrs+0x10c/0x230 [ 2947.972985] ? set_brk+0x180/0x180 [ 2947.973343] load_elf_binary+0x1ff/0x5730 [ 2947.973760] ? __lockdep_reset_lock+0x180/0x180 [ 2947.974226] ? lock_acquire+0x197/0x470 [ 2947.974608] ? find_held_lock+0x2c/0x110 [ 2947.975023] ? bprm_execve+0xc79/0x1a60 [ 2947.975408] ? elf_core_dump+0x3c50/0x3c50 [ 2947.975818] ? do_raw_read_unlock+0x3b/0x70 [ 2947.976236] ? _raw_read_unlock+0x1a/0x30 [ 2947.976630] ? load_misc_binary+0x605/0xb70 [ 2947.977061] bprm_execve+0xc9a/0x1a60 [ 2947.977441] ? open_exec+0x70/0x70 [ 2947.977798] ? memcpy+0x39/0x60 [ 2947.978128] ? copy_string_kernel+0x3b6/0x450 [ 2947.978566] do_execveat_common+0x772/0x8d0 [ 2947.978996] ? bprm_execve+0x1a60/0x1a60 [ 2947.979406] __x64_sys_execveat+0xed/0x140 [ 2947.979828] do_syscall_64+0x33/0x40 [ 2947.980189] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2947.980687] RIP: 0033:0x7fac73041b19 [ 2947.981049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2947.982775] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2947.983496] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2947.984185] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2947.984859] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2947.985522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2947.986204] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 14:01:12 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x2000000) [ 2948.083986] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue 14:01:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x8000000) 14:01:26 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x2, 0xa8202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x202fd9b0}, 0x2e080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2000, 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0x10001, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x100, 0x449, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) 14:01:26 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 48) 14:01:26 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x3000000) 14:01:26 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, 0x0, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:01:26 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:01:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 61) 14:01:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x350759, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) [ 2962.187705] FAULT_INJECTION: forcing a failure. [ 2962.187705] name failslab, interval 1, probability 0, space 0, times 0 [ 2962.189125] CPU: 0 PID: 20208 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2962.189911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2962.190830] Call Trace: [ 2962.191135] dump_stack+0x107/0x167 [ 2962.191558] should_fail.cold+0x5/0xa [ 2962.192002] ? security_file_alloc+0x34/0x170 [ 2962.192510] should_failslab+0x5/0x20 [ 2962.192938] kmem_cache_alloc+0x5b/0x310 [ 2962.193409] security_file_alloc+0x34/0x170 [ 2962.193938] __alloc_file+0xb7/0x320 [ 2962.194383] alloc_empty_file+0x6d/0x170 [ 2962.194845] path_openat+0xe3/0x26e0 [ 2962.195324] ? lock_acquire+0x197/0x470 [ 2962.195787] ? path_lookupat+0x860/0x860 [ 2962.196262] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2962.196828] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2962.197402] do_filp_open+0x190/0x3e0 [ 2962.197852] ? may_open_dev+0xf0/0xf0 [ 2962.198288] ? lock_chain_count+0x20/0x20 [ 2962.198770] ? __lockdep_reset_lock+0x180/0x180 [ 2962.199296] ? lock_acquire+0x197/0x470 [ 2962.199753] ? lock_release+0x680/0x680 [ 2962.200201] ? find_held_lock+0x2c/0x110 [ 2962.200663] ? kmem_cache_alloc+0x159/0x310 [ 2962.201158] ? mark_held_locks+0x9e/0xe0 [ 2962.201628] do_open_execat+0x116/0x690 [ 2962.202092] ? trace_hardirqs_on+0x5b/0x180 [ 2962.202577] ? __do_sys_uselib+0x5e0/0x5e0 [ 2962.203069] ? memcpy+0x39/0x60 [ 2962.203451] open_exec+0x42/0x70 14:01:26 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2962.203833] load_misc_binary+0x973/0xb70 [ 2962.204445] bprm_execve+0x969/0x1a60 [ 2962.204886] ? open_exec+0x70/0x70 [ 2962.205282] ? memcpy+0x39/0x60 [ 2962.205654] ? copy_string_kernel+0x3b6/0x450 [ 2962.206159] do_execveat_common+0x772/0x8d0 [ 2962.206645] ? bprm_execve+0x1a60/0x1a60 [ 2962.207125] __x64_sys_execveat+0xed/0x140 [ 2962.207590] do_syscall_64+0x33/0x40 [ 2962.208008] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2962.208573] RIP: 0033:0x7fde11765b19 [ 2962.208986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2962.210946] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2962.211781] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2962.212570] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2962.213361] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2962.214150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2962.214934] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:01:26 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x8000000) 14:01:26 executing program 6: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}}, 0x14}}, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x1ed982, 0x0) ioctl$DVD_AUTH(r2, 0x5390, &(0x7f0000000000)=@lsa={0x0, 0x3}) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x48042) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x8) close_range(r3, r0, 0x0) [ 2962.262947] FAULT_INJECTION: forcing a failure. [ 2962.262947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2962.264187] CPU: 1 PID: 20201 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2962.264881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2962.265724] Call Trace: [ 2962.266001] dump_stack+0x107/0x167 [ 2962.266376] should_fail.cold+0x5/0xa [ 2962.266770] __alloc_pages_nodemask+0x182/0x600 [ 2962.267243] ? mark_held_locks+0x9e/0xe0 [ 2962.267658] ? __alloc_pages_slowpath.constprop.0+0x2130/0x2130 [ 2962.268271] ? kmem_cache_free+0xa7/0x2d0 [ 2962.268697] alloc_pages_current+0x187/0x280 [ 2962.269133] __get_free_pages+0xc/0xa0 [ 2962.269529] ? kmem_cache_free+0x249/0x2d0 [ 2962.269953] tlb_remove_table+0x3ca/0xcb0 [ 2962.270383] ___pte_free_tlb+0x86/0xb0 [ 2962.270785] free_pgd_range+0x747/0x1380 [ 2962.271216] free_pgtables+0x230/0x2f0 [ 2962.271615] exit_mmap+0x28e/0x4f0 [ 2962.271965] ? __ia32_sys_remap_file_pages+0x150/0x150 [ 2962.272549] mmput+0xca/0x340 [ 2962.272880] free_bprm+0x65/0x2e0 [ 2962.273234] do_execveat_common+0x2e1/0x8d0 [ 2962.273678] ? bprm_execve+0x1a60/0x1a60 [ 2962.274116] __x64_sys_execveat+0xed/0x140 [ 2962.274553] do_syscall_64+0x33/0x40 [ 2962.274930] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2962.275455] RIP: 0033:0x7fac73041b19 [ 2962.275835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2962.277706] RSP: 002b:00007fac705b7188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2962.278485] RAX: ffffffffffffffda RBX: 00007fac73154f60 RCX: 00007fac73041b19 [ 2962.279205] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2962.279918] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2962.280631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2962.281347] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 14:01:26 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, 0x0, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:01:26 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x10000000) 14:01:26 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xf0ffff, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:26 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:01:26 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x10000000) 14:01:26 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 62) 14:01:26 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:01:27 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 49) 14:01:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:27 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1c000000) 14:01:27 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:01:27 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:27 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x1c000000) 14:01:27 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2962.478312] FAULT_INJECTION: forcing a failure. [ 2962.478312] name failslab, interval 1, probability 0, space 0, times 0 [ 2962.479412] CPU: 0 PID: 20244 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2962.480036] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2962.480770] Call Trace: [ 2962.481018] dump_stack+0x107/0x167 [ 2962.481352] should_fail.cold+0x5/0xa [ 2962.481698] ? create_object.isra.0+0x3a/0xa20 [ 2962.482127] should_failslab+0x5/0x20 [ 2962.482475] kmem_cache_alloc+0x5b/0x310 [ 2962.482849] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2962.483345] create_object.isra.0+0x3a/0xa20 [ 2962.483742] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2962.484206] kmem_cache_alloc+0x159/0x310 [ 2962.484640] security_file_alloc+0x34/0x170 [ 2962.485120] __alloc_file+0xb7/0x320 [ 2962.485538] alloc_empty_file+0x6d/0x170 [ 2962.486007] path_openat+0xe3/0x26e0 [ 2962.486428] ? lock_acquire+0x197/0x470 [ 2962.486874] ? path_lookupat+0x860/0x860 [ 2962.487329] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2962.487871] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2962.488429] do_filp_open+0x190/0x3e0 [ 2962.488852] ? may_open_dev+0xf0/0xf0 [ 2962.489271] ? lock_chain_count+0x20/0x20 [ 2962.489739] ? __lockdep_reset_lock+0x180/0x180 [ 2962.490253] ? lock_acquire+0x197/0x470 [ 2962.490689] ? lock_release+0x680/0x680 [ 2962.491114] ? find_held_lock+0x2c/0x110 [ 2962.491558] ? kmem_cache_alloc+0x159/0x310 [ 2962.492030] ? mark_held_locks+0x9e/0xe0 [ 2962.492481] do_open_execat+0x116/0x690 [ 2962.492921] ? trace_hardirqs_on+0x5b/0x180 [ 2962.493396] ? __do_sys_uselib+0x5e0/0x5e0 [ 2962.493887] ? memcpy+0x39/0x60 [ 2962.494255] open_exec+0x42/0x70 [ 2962.494618] load_misc_binary+0x973/0xb70 [ 2962.495086] bprm_execve+0x969/0x1a60 [ 2962.495539] ? open_exec+0x70/0x70 [ 2962.495944] ? memcpy+0x39/0x60 [ 2962.496321] ? copy_string_kernel+0x3b6/0x450 [ 2962.496840] do_execveat_common+0x772/0x8d0 [ 2962.497322] ? bprm_execve+0x1a60/0x1a60 [ 2962.497806] __x64_sys_execveat+0xed/0x140 [ 2962.498289] do_syscall_64+0x33/0x40 [ 2962.498696] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2962.499257] RIP: 0033:0x7fde11765b19 [ 2962.499668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2962.501665] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2962.502526] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2962.503286] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2962.504045] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2962.504757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2962.505391] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 [ 2962.507128] FAULT_INJECTION: forcing a failure. [ 2962.507128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2962.508261] CPU: 0 PID: 20235 Comm: syz-executor.5 Not tainted 5.10.209 #1 [ 2962.508878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2962.509610] Call Trace: [ 2962.509878] dump_stack+0x107/0x167 [ 2962.510219] should_fail.cold+0x5/0xa [ 2962.510581] _copy_to_user+0x2e/0x180 [ 2962.510933] simple_read_from_buffer+0xcc/0x160 [ 2962.511361] proc_fail_nth_read+0x198/0x230 [ 2962.511751] ? proc_sessionid_read+0x230/0x230 [ 2962.512159] ? security_file_permission+0x24e/0x570 [ 2962.512605] ? perf_trace_initcall_start+0x101/0x380 [ 2962.513075] ? proc_sessionid_read+0x230/0x230 [ 2962.513482] vfs_read+0x228/0x580 [ 2962.513823] ksys_read+0x12d/0x260 [ 2962.514142] ? vfs_write+0xa70/0xa70 [ 2962.514490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2962.514958] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2962.515439] do_syscall_64+0x33/0x40 [ 2962.515796] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2962.516261] RIP: 0033:0x7fac72ff469c [ 2962.516594] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2962.518326] RSP: 002b:00007fac705b7170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2962.519076] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fac72ff469c [ 2962.519816] RDX: 000000000000000f RSI: 00007fac705b71e0 RDI: 0000000000000003 [ 2962.520556] RBP: 00007fac705b71d0 R08: 0000000000000000 R09: 0000000000000000 [ 2962.521309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2962.522099] R13: 00007ffe243cf5df R14: 00007fac705b7300 R15: 0000000000022000 14:01:42 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 50) 14:01:42 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xd, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r1, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$FIONREAD(r2, 0x6801, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x837013, 0x0) unshare(0x48020200) unshare(0x42000000) 14:01:42 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x300000000) 14:01:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:42 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x300000000) 14:01:42 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x0) 14:01:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) 14:01:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 2978.220162] FAULT_INJECTION: forcing a failure. [ 2978.220162] name failslab, interval 1, probability 0, space 0, times 0 [ 2978.222320] CPU: 1 PID: 20272 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2978.223465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2978.225118] Call Trace: [ 2978.225583] dump_stack+0x107/0x167 [ 2978.226343] should_fail.cold+0x5/0xa [ 2978.227003] ? create_object.isra.0+0x3a/0xa20 [ 2978.227939] should_failslab+0x5/0x20 [ 2978.228601] kmem_cache_alloc+0x5b/0x310 [ 2978.229431] create_object.isra.0+0x3a/0xa20 [ 2978.230149] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2978.231181] kmem_cache_alloc+0x159/0x310 [ 2978.231855] jbd2__journal_start+0x190/0x7e0 [ 2978.232773] __ext4_journal_start_sb+0x214/0x390 14:01:42 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2978.233573] ext4_dirty_inode+0xbc/0x130 [ 2978.234448] ? ext4_setattr+0x2160/0x2160 [ 2978.235119] __mark_inode_dirty+0x492/0xd40 [ 2978.235850] touch_atime+0x5ea/0x6e0 [ 2978.236460] ? atime_needs_update+0x600/0x600 [ 2978.237198] ? pagecache_get_page+0x243/0xc80 [ 2978.237959] generic_file_buffered_read+0x191a/0x2920 [ 2978.238832] ? pagecache_get_page+0xc80/0xc80 [ 2978.239563] ? perf_trace_lock+0xac/0x490 [ 2978.240248] ? __lock_acquire+0x1657/0x5b00 [ 2978.240976] generic_file_read_iter+0x33f/0x490 [ 2978.241747] ext4_file_read_iter+0x184/0x4c0 [ 2978.242495] __kernel_read+0x593/0xaa0 [ 2978.243144] ? do_sendfile+0x1090/0x1090 [ 2978.243816] ? _cond_resched+0x12/0x80 [ 2978.244472] ? avc_policy_seqno+0x9/0x70 [ 2978.245135] ? selinux_file_permission+0x92/0x520 [ 2978.245962] kernel_read+0x52/0x70 14:01:42 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x7ffffffffffff) [ 2978.246556] bprm_execve+0x882/0x1a60 [ 2978.247350] ? open_exec+0x70/0x70 [ 2978.247944] ? memcpy+0x39/0x60 [ 2978.248624] ? copy_string_kernel+0x3b6/0x450 [ 2978.249378] do_execveat_common+0x772/0x8d0 [ 2978.250110] ? bprm_execve+0x1a60/0x1a60 [ 2978.250802] __x64_sys_execveat+0xed/0x140 [ 2978.251510] do_syscall_64+0x33/0x40 [ 2978.252122] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2978.252903] RIP: 0033:0x7fde11765b19 [ 2978.253515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2978.256423] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2978.257659] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2978.258821] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2978.259968] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2978.261123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2978.262281] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:01:42 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) 14:01:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:42 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:01:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x2) 14:01:42 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x100000000000000) 14:01:42 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x7ffffffffffff) 14:01:43 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 51) [ 2978.495236] FAULT_INJECTION: forcing a failure. [ 2978.495236] name failslab, interval 1, probability 0, space 0, times 0 [ 2978.496296] CPU: 0 PID: 20302 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2978.496876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2978.497773] Call Trace: [ 2978.498094] dump_stack+0x107/0x167 [ 2978.498503] should_fail.cold+0x5/0xa [ 2978.498924] ? load_elf_phdrs+0x10c/0x230 [ 2978.499383] should_failslab+0x5/0x20 [ 2978.499800] __kmalloc+0x72/0x390 [ 2978.500197] load_elf_phdrs+0x10c/0x230 [ 2978.500633] ? set_brk+0x180/0x180 [ 2978.501043] load_elf_binary+0x1ff/0x5730 [ 2978.501483] ? __lockdep_reset_lock+0x180/0x180 [ 2978.502015] ? lock_acquire+0x197/0x470 [ 2978.502447] ? find_held_lock+0x2c/0x110 [ 2978.502902] ? bprm_execve+0x948/0x1a60 [ 2978.503346] ? elf_core_dump+0x3c50/0x3c50 [ 2978.503811] ? do_raw_read_unlock+0x3b/0x70 [ 2978.504288] ? _raw_read_unlock+0x1a/0x30 [ 2978.504738] ? load_misc_binary+0x605/0xb70 [ 2978.505224] bprm_execve+0x969/0x1a60 [ 2978.505653] ? open_exec+0x70/0x70 [ 2978.506052] ? memcpy+0x39/0x60 [ 2978.506418] ? copy_string_kernel+0x3b6/0x450 [ 2978.506924] do_execveat_common+0x772/0x8d0 [ 2978.507399] ? bprm_execve+0x1a60/0x1a60 [ 2978.507867] __x64_sys_execveat+0xed/0x140 [ 2978.508338] do_syscall_64+0x33/0x40 [ 2978.508749] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2978.509302] RIP: 0033:0x7fde11765b19 [ 2978.509712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2978.511688] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2978.512516] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2978.513290] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2978.514069] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2978.514843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2978.515614] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:01:58 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x9}) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 52) 14:01:58 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) fdatasync(0xffffffffffffffff) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) signalfd(r0, &(0x7f0000000180), 0x8) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000340)) fallocate(0xffffffffffffffff, 0x4, 0x9, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000100)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000005cb80)={0xfffffffffffffffe, [], 0x7f, "9656c75f04ba4d"}) close(0xffffffffffffffff) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=@sha1={0x1, "7974f51f91a9b545415542171451ae3688c80f7d"}, 0x15, 0x2) lseek(r1, 0x0, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 14:01:58 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x200000000000000) 14:01:58 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:01:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x5000000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x3) 14:01:58 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x100000000000000) 14:01:58 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r0, 0x0, 0x300000000, 0x0) [ 2993.694674] FAULT_INJECTION: forcing a failure. [ 2993.694674] name failslab, interval 1, probability 0, space 0, times 0 [ 2993.695771] CPU: 0 PID: 20324 Comm: syz-executor.3 Not tainted 5.10.209 #1 [ 2993.696412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.697163] Call Trace: [ 2993.697419] dump_stack+0x107/0x167 [ 2993.697757] should_fail.cold+0x5/0xa [ 2993.698117] ? create_object.isra.0+0x3a/0xa20 [ 2993.698551] should_failslab+0x5/0x20 [ 2993.698895] kmem_cache_alloc+0x5b/0x310 [ 2993.699279] create_object.isra.0+0x3a/0xa20 [ 2993.699678] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2993.700144] kmem_cache_alloc+0x159/0x310 [ 2993.700542] jbd2__journal_start+0x190/0x7e0 [ 2993.700955] __ext4_journal_start_sb+0x214/0x390 [ 2993.701402] ext4_dirty_inode+0xbc/0x130 [ 2993.701777] ? ext4_setattr+0x2160/0x2160 [ 2993.702160] __mark_inode_dirty+0x492/0xd40 [ 2993.702574] touch_atime+0x5ea/0x6e0 [ 2993.702915] ? atime_needs_update+0x600/0x600 [ 2993.703334] ? pagecache_get_page+0x243/0xc80 [ 2993.703750] generic_file_buffered_read+0x191a/0x2920 [ 2993.704257] ? pagecache_get_page+0xc80/0xc80 [ 2993.704675] ? perf_trace_run_bpf_submit+0xf5/0x190 [ 2993.705134] generic_file_read_iter+0x33f/0x490 [ 2993.705574] ext4_file_read_iter+0x184/0x4c0 [ 2993.705983] __kernel_read+0x593/0xaa0 [ 2993.706363] ? do_sendfile+0x1090/0x1090 [ 2993.706742] ? _cond_resched+0x12/0x80 [ 2993.707105] ? avc_policy_seqno+0x9/0x70 [ 2993.707479] ? selinux_file_permission+0x92/0x520 [ 2993.707945] kernel_read+0x52/0x70 [ 2993.708284] bprm_execve+0x882/0x1a60 [ 2993.708647] ? open_exec+0x70/0x70 [ 2993.708972] ? memcpy+0x39/0x60 [ 2993.709283] ? copy_string_kernel+0x3b6/0x450 [ 2993.709704] do_execveat_common+0x772/0x8d0 [ 2993.710127] ? bprm_execve+0x1a60/0x1a60 [ 2993.710533] __x64_sys_execveat+0xed/0x140 [ 2993.710929] do_syscall_64+0x33/0x40 [ 2993.711274] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2993.711740] RIP: 0033:0x7fde11765b19 [ 2993.712080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.713727] RSP: 002b:00007fde0ecdb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 2993.714441] RAX: ffffffffffffffda RBX: 00007fde11878f60 RCX: 00007fde11765b19 [ 2993.715082] RDX: 0000000000000000 RSI: 0000000020000480 RDI: ffffffffffffff9c [ 2993.715727] RBP: 00007fde0ecdb1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2993.716375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2993.717017] R13: 00007ffefe4cf6af R14: 00007fde0ecdb300 R15: 0000000000022000 14:01:58 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 14:01:58 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="01", 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200060000000000000000003800000000000000000000000000200001000000000000000000000003"], 0x58) close(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x4) 14:01:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000001280)=@updsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@private0}, {@in, 0x0, 0x32}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x70, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x120, 0x40, "976ae46d07d1812fd0664e95dee18314b91df2e10ff98153074f6a02e3550c030000001b"}}]}, 0x160}}, 0x0) 14:01:58 executing program 1: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x800000000000000) 14:01:58 executing program 2: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x300000000, 0x200000000000000) 14:01:58 executing program 6: syz_io_uring_setup(0x3ac4, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x20010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r0, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x10, 0x1000, 0x1}, 0xd6) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x6661}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$rfkill(r4, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1}, 0x8) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xc0, 0x64, 0x5, 0x3, 0x0, 0x100000000, 0x8000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xe1, 0x2}, 0x11410, 0x8, 0x8, 0x4, 0x8, 0x7, 0x7f3, 0x0, 0x7d555d, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x2) 14:01:58 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) 14:01:58 executing program 4: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) write(r0, &(0x7f0000000180)="d9", 0x1) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='u', 0x1}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x300000000, 0x0) [ 2993.854044] [ 2993.854375] ====================================================== [ 2993.855317] WARNING: possible circular locking dependency detected [ 2993.856256] 5.10.209 #1 Not tainted [ 2993.856969] ------------------------------------------------------ [ 2993.858205] syz-executor.6/20339 is trying to acquire lock: [ 2993.859324] ffff88800d318b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 2993.861395] [ 2993.861395] but task is already holding lock: [ 2993.862582] ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2993.864358] [ 2993.864358] which lock already depends on the new lock. [ 2993.864358] [ 2993.865964] [ 2993.865964] the existing dependency chain (in reverse order) is: [ 2993.871089] [ 2993.871089] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 2993.872344] __mutex_lock+0x13d/0x10b0 [ 2993.873229] rfkill_register+0x36/0xa10 [ 2993.874132] hci_register_dev+0x42e/0xc00 [ 2993.874883] __vhci_create_device+0x2c8/0x5c0 [ 2993.875641] vhci_open_timeout+0x38/0x50 [ 2993.876330] process_one_work+0x9a9/0x14b0 [ 2993.877048] worker_thread+0x61d/0x1310 [ 2993.877732] kthread+0x38f/0x470 [ 2993.878334] ret_from_fork+0x22/0x30 [ 2993.878962] [ 2993.878962] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 2993.879963] __mutex_lock+0x13d/0x10b0 [ 2993.880629] vhci_send_frame+0x63/0xa0 [ 2993.881296] hci_send_frame+0x1b9/0x320 [ 2993.881971] hci_tx_work+0x10af/0x1660 [ 2993.882642] process_one_work+0x9a9/0x14b0 [ 2993.883356] worker_thread+0x61d/0x1310 [ 2993.884039] kthread+0x38f/0x470 [ 2993.884627] ret_from_fork+0x22/0x30 [ 2993.885257] [ 2993.885257] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 2993.886459] __flush_work+0x105/0xa90 [ 2993.887112] hci_dev_do_close+0x131/0x1240 [ 2993.887825] hci_unregister_dev+0x149/0x430 [ 2993.888551] vhci_release+0x70/0xf0 [ 2993.889180] __fput+0x285/0x980 [ 2993.889757] task_work_run+0xe2/0x1a0 [ 2993.890416] do_exit+0xb6f/0x2600 [ 2993.891019] do_group_exit+0x125/0x310 [ 2993.891682] get_signal+0x4bc/0x22e0 [ 2993.892323] arch_do_signal_or_restart+0x2b7/0x1990 [ 2993.893149] exit_to_user_mode_prepare+0x10f/0x190 [ 2993.893961] syscall_exit_to_user_mode+0x38/0x1e0 [ 2993.894771] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2993.895613] [ 2993.895613] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 2993.896597] __mutex_lock+0x13d/0x10b0 [ 2993.897263] bg_scan_update+0x82/0x500 [ 2993.897929] process_one_work+0x9a9/0x14b0 [ 2993.898652] worker_thread+0x61d/0x1310 [ 2993.899331] kthread+0x38f/0x470 [ 2993.899923] ret_from_fork+0x22/0x30 [ 2993.900554] [ 2993.900554] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 2993.902170] __lock_acquire+0x29e7/0x5b00 [ 2993.903112] lock_acquire+0x197/0x470 [ 2993.903970] __flush_work+0x105/0xa90 [ 2993.904835] __cancel_work_timer+0x368/0x4c0 [ 2993.905810] hci_request_cancel_all+0x73/0x230 [ 2993.906855] hci_dev_do_close+0xd9/0x1240 [ 2993.907776] hci_rfkill_set_block+0x166/0x1a0 [ 2993.908767] rfkill_set_block+0x1fd/0x540 [ 2993.909687] rfkill_fop_write+0x253/0x4b0 [ 2993.910635] vfs_write+0x29a/0xa70 [ 2993.911455] ksys_write+0x1f6/0x260 [ 2993.912293] do_syscall_64+0x33/0x40 [ 2993.913135] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2993.914249] [ 2993.914249] other info that might help us debug this: [ 2993.914249] [ 2993.915825] Chain exists of: [ 2993.915825] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 2993.915825] [ 2993.918511] Possible unsafe locking scenario: [ 2993.918511] [ 2993.919685] CPU0 CPU1 [ 2993.920589] ---- ---- [ 2993.921506] lock(rfkill_global_mutex); [ 2993.922343] lock(&data->open_mutex); [ 2993.923620] lock(rfkill_global_mutex); [ 2993.924918] lock((work_completion)(&hdev->bg_scan_update)); [ 2993.926101] [ 2993.926101] *** DEADLOCK *** [ 2993.926101] [ 2993.927283] 1 lock held by syz-executor.6/20339: [ 2993.928204] #0: ffffffff85619668 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 2993.930065] [ 2993.930065] stack backtrace: [ 2993.930955] CPU: 1 PID: 20339 Comm: syz-executor.6 Not tainted 5.10.209 #1 [ 2993.932317] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2993.933935] Call Trace: [ 2993.934481] dump_stack+0x107/0x167 [ 2993.935220] check_noncircular+0x263/0x2e0 [ 2993.936069] ? register_lock_class+0xbb/0x17b0 [ 2993.936971] ? print_circular_bug+0x470/0x470 [ 2993.937886] ? perf_tp_event+0x5ce/0xc00 [ 2993.938710] ? find_first_zero_bit+0x94/0xb0 [ 2993.939618] __lock_acquire+0x29e7/0x5b00 [ 2993.940486] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2993.941527] ? SOFTIRQ_verbose+0x10/0x10 [ 2993.942348] ? __lockdep_reset_lock+0x180/0x180 [ 2993.943271] ? tracing_generic_entry_update+0x1ed/0x270 [ 2993.944342] lock_acquire+0x197/0x470 [ 2993.945105] ? __flush_work+0xdd/0xa90 [ 2993.945890] ? lock_release+0x680/0x680 [ 2993.946682] ? __flush_work+0x78c/0xa90 [ 2993.947473] ? lock_downgrade+0x6d0/0x6d0 [ 2993.948328] __flush_work+0x105/0xa90 [ 2993.949088] ? __flush_work+0xdd/0xa90 [ 2993.949876] ? lock_chain_count+0x20/0x20 [ 2993.950716] ? queue_delayed_work_on+0xe0/0xe0 [ 2993.951617] ? mark_lock+0xf5/0x2df0 [ 2993.952360] ? mark_lock+0xf5/0x2df0 [ 2993.953110] ? lock_chain_count+0x20/0x20 [ 2993.953932] ? perf_trace_lock+0xac/0x490 [ 2993.954763] ? lock_chain_count+0x20/0x20 [ 2993.955608] ? mark_held_locks+0x9e/0xe0 [ 2993.956439] __cancel_work_timer+0x368/0x4c0 [ 2993.957313] ? cancel_delayed_work+0x20/0x20 [ 2993.958209] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.959234] ? __cancel_work+0x250/0x2b0 [ 2993.960035] ? trace_hardirqs_on+0x5b/0x180 [ 2993.960886] ? __cancel_work+0x1bb/0x2b0 [ 2993.961698] ? try_to_grab_pending+0xe0/0xe0 [ 2993.962586] hci_request_cancel_all+0x73/0x230 [ 2993.963492] hci_dev_do_close+0xd9/0x1240 [ 2993.964316] ? rfkill_set_block+0x18f/0x540 [ 2993.965177] ? hci_dev_open+0x350/0x350 [ 2993.965970] ? mark_held_locks+0x9e/0xe0 [ 2993.966798] hci_rfkill_set_block+0x166/0x1a0 [ 2993.967687] ? hci_power_off+0x20/0x20 [ 2993.968450] rfkill_set_block+0x1fd/0x540 [ 2993.969292] rfkill_fop_write+0x253/0x4b0 [ 2993.970138] ? rfkill_sync_work+0xa0/0xa0 [ 2993.970967] ? security_file_permission+0x24e/0x570 [ 2993.971971] ? rfkill_sync_work+0xa0/0xa0 [ 2993.972791] vfs_write+0x29a/0xa70 [ 2993.973520] ksys_write+0x1f6/0x260 [ 2993.974268] ? __ia32_sys_read+0xb0/0xb0 [ 2993.975088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2993.976124] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2993.977155] do_syscall_64+0x33/0x40 [ 2993.977900] entry_SYSCALL_64_after_hwframe+0x62/0xc7 [ 2993.978916] RIP: 0033:0x7f744afe5b19 [ 2993.979647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2993.983236] RSP: 002b:00007f744855b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2993.984721] RAX: ffffffffffffffda RBX: 00007f744b0f8f60 RCX: 00007f744afe5b19 [ 2993.986124] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000005 [ 2993.987526] RBP: 00007f744b03ff6d R08: 0000000000000000 R09: 0000000000000000 [ 2993.988927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2993.990328] R13: 00007fff68866dff R14: 00007f744855b300 R15: 0000000000022000 VM DIAGNOSIS: 14:01:58 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff815fb87c RDX=0000000000000000 RSI=0000000000000008 RDI=ffffea0000f98700 RBP=ffffea0000f98700 RSP=ffff88803ef37748 R8 =0000000000000000 R9 =ffffea0000f98700 R10=0000000000000000 R11=0000000000000001 R12=ffffea0000f98708 R13=ffff888053829838 R14=dffffc0000000000 R15=00007f816e508000 RIP=ffffffff816c5b73 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe7000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005592a7eeb350 CR3=0000000047792000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000dd060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff822cbdac RDI=ffffffff879e8240 RBP=ffffffff879e8200 RSP=ffff88804aa97170 R8 =0000000000000001 R9 =0000000000000003 R10=000000000000000a R11=0000000000000001 R12=0000000000000020 R13=fffffbfff0f3d094 R14=fffffbfff0f3d04a R15=dffffc0000000000 RIP=ffffffff822cbe00 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f744855b700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005630f0e3a9a8 CR3=0000000048ac2000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000